# changelog

author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.367.el6
changelog:
  - kvm-qcow2-Return-real-error-code-in-qcow2_read_snapshots2.patch [bz#796011]
  - kvm-qcow2-Return-real-error-code-in-qcow2_write_snapshot2.patch [bz#796011]
  - kvm-Add-new-macro-QEMU_PACKED-for-packed-C-structures2.patch [bz#796011]
  - kvm-qcow2-Update-snapshot-table-information-at-once2.patch [bz#796011]
  - kvm-qcow2-Cleanups-and-memleak-fix-in-qcow2_snapshot_cre2.patch [bz#796011]
  - kvm-qcow2-Rework-qcow2_snapshot_create-error-handling2.patch [bz#796011]
  - kvm-qcow2-Return-real-error-in-qcow2_snapshot_goto2.patch [bz#796011]
  - kvm-qcow2-refcount-remove-dead-assignment2.patch [bz#796011]
  - kvm-qcow2-Fix-order-of-refcount-updates-in-qcow2_snapsho2.patch [bz#796011]
  - kvm-qcow2-Fix-order-in-qcow2_snapshot_delete2.patch [bz#796011]
  - kvm-qcow2-Return-real-error-in-qcow2_update_snapshot_ref2.patch [bz#796011]
  - kvm-qcow2-Fix-L1-write-error-handling-in-qcow2_update_sn2.patch [bz#796011]
  - kvm-Documentation-Remove-outdated-host_device-note2.patch [bz#953108]
  - kvm-pci-assign-Convert-iommu-property-to-booleam2.patch [bz#925170]
  - kvm-pci-assign-Allow-to-disable-MSI-perference-for-host-.patch [bz#925170]
  - kvm-block-bdrv_img_create-add-Error-argument2.patch [bz#877240]
  - kvm-qemu-img-img_create-pass-Error-object-to-bdrv_img_cr.patch [bz#877240]
  - kvm-qemu-img-img_create-drop-unneeded-goto-and-ret-varia2.patch [bz#877240]
  - kvm-qmp-qmp_transaction-pass-Error-object-to-bdrv_img_cr2.patch [bz#877240]
  - kvm-block-bdrv_img_create-drop-unused-error-handling-cod2.patch [bz#877240]
  - kvm-pc-Add-a-new-machine-type-rhel6.5.0.patch [bz#821741]
  - kvm-target-i386-cpu-Enable-SEP-by-default-for-rhel6.5.0-.patch [bz#821741]
  - kvm-revert-disable-SEP-on-all-CPU-models-745717.patch [bz#821741]
  - kvm-target-i386-cpu-Enable-SEP-for-Haswell-models.patch [bz#821741]
  - Resolves: bz#796011
    (Prompt error of trigger blkdebug: BLKDBG_CLUSTER_FREE event is not the same as expected)
  - Resolves: bz#821741
    ((re-)enable SEP flag on CPU models)
  - Resolves: bz#877240
    (QMP: improve error message for blockdev-snapshot-sync failure)
  - Resolves: bz#925170
    (MSI routing for 1553 card to guest stops working)
  - Resolves: bz#953108
    (qemu-img man page still mentions host_device)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.368.el6
changelog:
  - kvm-Revert-usb-redir-Add-flow-control-supportn.patch [bz#909059]
  - kvm-Revert-spice-qemu-char.c-remove-intermediate-buffern.patch [bz#909059]
  - kvm-Revert-spice-qemu-char.c-add-throttlingn.patch [bz#909059]
  - kvm-Revert-virtio-console-Enable-port-throttling-when-chn.patch [bz#909059]
  - kvm-Revert-char-Throttle-when-host-connection-is-downn.patch [bz#909059]
  - kvm-Revert-char-Equip-the-unix-tcp-backend-to-handle-nonn.patch [bz#909059]
  - kvm-Revert-char-Update-send_all-to-handle-nonblocking-chn.patch [bz#909059]
  - kvm-Revert-char-Disable-write-callback-if-throttled-charn.patch [bz#909059]
  - kvm-Revert-char-Add-framework-for-a-write-unblocked-calln.patch [bz#909059]
  - kvm-Revert-iohandlers-Add-enable-disable_write_fd_handlen.patch [bz#909059]
  - kvm-Revert-char-Add-a-QemuChrHandlers-struct-to-initialin.patch [bz#909059]
  - kvm-Revert-char-mark-socket-closed-if-write-fails-with-En.patch [bz#909059]
  - kvm-Revert-char-Split-out-tcp-socket-close-code-in-a-sepn.patch [bz#909059]
  - kvm-char-rename-qemu_chr_write-qemu_chr_fe_writen.patch [bz#909059]
  - kvm-char-rename-qemu_chr_printf-qemu_chr_fe_printfn.patch [bz#909059]
  - kvm-char-rename-qemu_chr_read-qemu_chr_be_writen.patch [bz#909059]
  - kvm-char-rename-qemu_chr_can_read-qemu_chr_be_can_readn.patch [bz#909059]
  - kvm-char-rename-qemu_chr_guest_open-qemu_chr_fe_openn.patch [bz#909059]
  - kvm-char-rename-qemu_chr_guest_close-qemu_chr_fe_closen.patch [bz#909059]
  - kvm-char-qemu_chr_ioctl-qemu_chr_fe_ioctln.patch [bz#909059]
  - kvm-char-rename-qemu_chr_set_echo-qemu_chr_fe_set_echon.patch [bz#909059]
  - kvm-char-rename-qemu_chr_open-qemu_chr_newn.patch [bz#909059]
  - kvm-char-qemu_chr_open_opts-qemu_chr_new_from_optsn.patch [bz#909059]
  - kvm-char-rename-qemu_chr_close-qemu_chr_deleten.patch [bz#909059]
  - kvm-char-rename-qemu_chr_get_msgfd-qemu_chr_fe_get_msgfdn.patch [bz#909059]
  - kvm-char-remove-qemu_chr_send_eventn.patch [bz#909059]
  - kvm-char-document-the-functions-that-will-be-the-publicn.patch [bz#909059]
  - kvm-qemu-char-rename-qemu_chr_event-to-qemu_chr_be_eventn.patch [bz#909059]
  - kvm-rename-IOCanRWHandler-to-IOCanReadHandlern.patch [bz#909059]
  - kvm-qemu-char-Plug-memory-leak-on-qemu_chr_open_pty-erron.patch [bz#909059]
  - kvm-char-socket-fix-error-reportingn.patch [bz#909059]
  - kvm-qemu-char-remove-dead-confusing-logic-with-nb_stdio_n.patch [bz#909059]
  - kvm-char-add-IOWatchPoll-supportn.patch [bz#909059]
  - kvm-qemu-char-convert-fd_chr-to-use-a-GIOChanneln.patch [bz#909059]
  - kvm-qemu-char-convert-pty-to-GIOChanneln.patch [bz#909059]
  - kvm-qemu-char-convert-pty-to-GIOChannelnn.patch [bz#909059]
  - kvm-qemu-char-tcp-make-use-GIOChanneln.patch [bz#909059]
  - kvm-qemu-char-add-watch-supportn.patch [bz#909059]
  - kvm-qemu-char-add-pty-watchn.patch [bz#909059]
  - kvm-char-add-gio-watch-fn-for-tcp-backendsn.patch [bz#909059]
  - kvm-qemu-char-use-a-glib-timeout-instead-of-qemu-timern.patch [bz#909059]
  - kvm-virtio-console-add-flow-controln.patch [bz#909059]
  - kvm-virtio-serial-make-flow-control-explicit-in-virtio-cn.patch [bz#909059]
  - kvm-Add-glib-support-to-main-loopn.patch [bz#909059]
  - kvm-virtio-console-Add-some-trace-eventsn.patch [bz#909059]
  - kvm-char-Fix-return-type-of-qemu_chr_fe_add_watchn.patch [bz#909059]
  - kvm-fix-monitorn.patch [bz#909059]
  - kvm-qemu-char-rewrite-io_channel_send_all-and-drop-the-n.patch [bz#909059]
  - kvm-qstring-add-qstring_get_lengthn.patch [bz#909059]
  - kvm-Monitor-Make-output-buffer-dynamicn.patch [bz#909059]
  - kvm-usb-redir-Add-flow-control-supportn.patch [bz#909059]
  - kvm-qemu-char-eliminate-busy-waiting-on-can_read-returnin.patch [bz#909059]
  - kvm-qemu-char-really-fix-behavior-on-can_read-0n.patch [bz#909059]
  - kvm-qemu-char-another-io_add_watch_poll-fixn.patch [bz#909059]
  - kvm-virtio-console-Also-throttle-when-less-was-written-tn.patch [bz#909059]
  - kvm-virtio-console-Remove-any-pending-watches-on-closen.patch [bz#909059]
  - kvm-spice-qemu-char-Remove-dead-debugging-coden.patch [bz#909059]
  - kvm-spice-qemu-char-Add-watch-supportn.patch [bz#909059]
  - kvm-spice-qemu-char-Remove-intermediate-buffern.patch [bz#909059]
  - kvm-qemu-char-use-consistent-idiom-for-removing-sourcesn.patch [bz#909059]
  - kvm-qemu-char-simplify-pty-pollingn.patch [bz#909059]
  - kvm-qemu-char-correct-return-value-from-chr_read-function.patch [bz#909059]
  - kvm-qemu-char-do-not-operate-on-sources-from-finalize-can.patch [bz#909059]
  - kvm-char-introduce-a-blocking-version-of-qemu_chr_fe_wrin.patch [bz#909059]
  - kvm-virtio-console-add-a-no-flow-control-mode-for-compatn.patch [bz#909059]
  - Resolves: bz#909059
    (Switch to upstream solution for chardev flow control)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.369.el6
changelog:
  - kvm-qemu-img-allow-rebase-to-a-NULL-backing-file-when-un.patch [bz#670162]
  - kvm-qemu-img-rebase-use-empty-string-to-rebase-without-b.patch [bz#670162]
  - Spec file and qemu-ga files changes for qemu-ga [bz#911569]
  - Resolves: bz#670162
    ([RFE] Removing the backing file using qemu-img re-base)
  - Resolves: bz#911569
    ([Hitachi 6.5 FEAT] Application-consistent online backup (qemu-ga freeze/thaw hooks for linux guests))


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.370.el6
changelog:
  - kvm-virtio-blk-fix-unplug-virsh-reboot.patch [bz#869586]
  - kvm-target-i386-cpuid-check-cpuid_7_0_ebx-too-on-check-e.patch [bz#882834]
  - kvm-qdev-New-qdev_prop_set_string.patch [bz#947416]
  - kvm-constify-value-pointer-for-qdev_prop_set_string.patch [bz#947416]
  - kvm-usb-storage-Forward-serial-number-to-scsi-disk.patch [bz#947416]
  - kvm-qga-set-umask-0077-when-daemonizing-CVE-2013-2007.patch [bz#953932]
  - kvm-qga-distinguish-binary-modes-in-guest_file_open_mode.patch [bz#953932]
  - kvm-qga-unlink-just-created-guest-file-if-fchmod-or-fdop.patch [bz#953932]
  - Resolves: bz#869586
    (core dump happens when quitting qemu via monitor)
  - Resolves: bz#882834
    (no warning while check the lacked cpuid_7_0_ebx_feature_name flag)
  - Resolves: bz#947416
    (fail to specify the serial number for usb storage device)
  - Resolves: bz#953932
    (CVE-2013-2007 qemu: guest agent creates files with insecure permissions in deamon mode [rhel-6.5])


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.371.el6
changelog:
  - kvm-vmdk-Use-bdrv_-p-write_sync-for-metadata-writes.patch [bz#960685]
  - kvm-block-Remove-unused-s-hd-in-various-drivers3.patch [bz#960685]
  - kvm-vmdk-fix-endianness-bugs.patch [bz#960685]
  - kvm-VMDK-introduce-VmdkExtent.patch [bz#960685]
  - kvm-VMDK-bugfix-align-offset-to-cluster-in-get_whole_clu.patch [bz#960685]
  - kvm-VMDK-probe-for-monolithicFlat-images.patch [bz#960685]
  - kvm-VMDK-separate-vmdk_open-by-format-version.patch [bz#960685]
  - kvm-VMDK-add-field-BDRVVmdkState.desc_offset.patch [bz#960685]
  - kvm-VMDK-flush-multiple-extents.patch [bz#960685]
  - kvm-VMDK-move-static-cid_update-flag-to-bs-field.patch [bz#960685]
  - kvm-VMDK-change-get_cluster_offset-return-type.patch [bz#960685]
  - kvm-VMDK-open-read-write-for-monolithicFlat-image.patch [bz#960685]
  - kvm-VMDK-create-different-subformats.patch [bz#960685]
  - kvm-VMDK-fix-coding-style.patch [bz#960685]
  - kvm-block-add-bdrv_get_allocated_file_size-operation.patch [bz#960685]
  - kvm-Use-new-macro-QEMU_PACKED-for-packed-structures.patch [bz#960685]
  - kvm-VMDK-enable-twoGbMaxExtentFlat.patch [bz#960685]
  - kvm-VMDK-add-twoGbMaxExtentSparse-support.patch [bz#960685]
  - kvm-VMDK-separate-vmdk_read_extent-vmdk_write_extent.patch [bz#960685]
  - kvm-VMDK-Opening-compressed-extent.patch [bz#960685]
  - kvm-VMDK-read-write-compressed-extent.patch [bz#960685]
  - kvm-VMDK-creating-streamOptimized-subformat.patch [bz#960685]
  - kvm-VMDK-bugfix-open-Haiku-vmdk-image.patch [bz#960685]
  - kvm-VMDK-bugfix-opening-vSphere-4-exported-image.patch [bz#960685]
  - kvm-VMDK-fix-leak-of-extent_file.patch [bz#960685]
  - kvm-vmdk-fix-return-values-of-vmdk_parent_open.patch [bz#960685]
  - kvm-vmdk-clean-up-open.patch [bz#960685]
  - kvm-vmdk-remove-unneeded-variable-assignment.patch [bz#960685]
  - kvm-vmdk-vmdk_read_cid-returns-garbage-if-p_name-is-NULL.patch [bz#960685]
  - kvm-vmdk-Improve-error-handling.patch [bz#960685]
  - kvm-vmdk-Fix-possible-segfaults.patch [bz#960685]
  - kvm-Include-zlib.h-using-include.patch [bz#960685]
  - kvm-block-vmdk-Fix-warning-from-splint-comparision-of-un.patch [bz#960685]
  - kvm-vmdk-Fix-header-structure.patch [bz#960685]
  - kvm-vmdk-Read-footer-for-streamOptimized-images.patch [bz#960685]
  - kvm-block-vmdk-image-file-reopen.patch [bz#960685]
  - kvm-vmdk-relative_path-use-pstrcpy-in-place-of-strncpy.patch [bz#960685]
  - kvm-vmdk-Fix-data-corruption-bug-in-WRITE-and-READ-handl.patch [bz#960685]
  - kvm-block-Use-error-code-EMEDIUMTYPE-for-wrong-format-in.patch [bz#960685]
  - kvm-vmdk-Allow-selecting-SCSI-adapter-in-image-creation.patch [bz#960685]
  - kvm-vmdk-Allow-space-in-file-name.patch [bz#960685]
  - kvm-vmdk-named-return-code.patch [bz#960685]
  - kvm-vmdk-add-support-for-zeroed-grain-GTE.patch [bz#960685]
  - kvm-vmdk-Add-option-to-create-zeroed-grain-image.patch [bz#960685]
  - kvm-vmdk-change-magic-number-to-macro.patch [bz#960685]
  - kvm-vmdk-store-fields-of-VmdkMetaData-in-cpu-endian.patch [bz#960685]
  - kvm-vmdk-add-bdrv_co_write_zeroes.patch [bz#960685]
  - Resolves: bz#960685
    ([RHEL-6.5] Backport support for vmdk image format)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.372.el6
changelog:
  - kvm-usb-hub-limit-chain-length.patch [bz#905851]
  - kvm-usb-hub-report-status-changes-only-once.patch [bz#905851]
  - Resolves: bz#905851
    (Fail to start  guest which contains more than 51 usbs disk with multifunction)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.373.el6
changelog:
  - kvm-atapi-reset-cdrom-tray-statuses-on-ide_reset.patch [bz#886878]
  - kvm-build-sys-add-guards-to-generated-headers.patch [bz#884253]
  - kvm-audio-allow-machine-to-specify-if-mixemu-is-disabled.patch [bz#884253]
  - kvm-pc-machine-rhel-6.4-do-not-have-mixemu.patch [bz#884253]
  - kvm-hda-audio-do-not-export-vmstate_hda_audio_v1.patch [bz#884253]
  - kvm-hda-audio-register-different-device-depending-on-mix.patch [bz#884253]
  - kvm-audio-split-sample-conversion-and-volume-mixing3.patch [bz#884253]
  - kvm-audio-add-VOICE_VOLUME-ctl3.patch [bz#884253]
  - kvm-audio-don-t-apply-volume-effect-if-backend-has-VOICE3.patch [bz#884253]
  - kvm-hw-ac97-remove-USE_MIXER-code3.patch [bz#884253]
  - kvm-hw-ac97-the-volume-mask-is-not-only-0x1f3.patch [bz#884253]
  - kvm-hw-ac97-add-support-for-volume-control3.patch [bz#884253]
  - kvm-audio-spice-add-support-for-volume-control3.patch [bz#884253]
  - Resolves: bz#884253
    (Allow control of volume from within Windows Guests (Volume Mixture))
  - Resolves: bz#886878
    (atapi: tray statuses (locked and open) are not reset on boot/reboot of guest)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.374.el6
changelog:
  - kvm-vnc-Add-SCROLL-lock-key-to-kbd_leds.patch [bz#955302]
  - kvm-vnc-Support-for-LED-state-extension.patch [bz#955302]
  - kvm-vnc-Adjust-lock-state-sync-logic-with-VNC_FEATURE_LE.patch [bz#955302]
  - kvm-doc-document-the-Pseudo-encoding-of-LED-state.patch [bz#955302]
  - kvm-block-fix-qcow2_co_flush-deadlock.patch [bz#962378]
  - kvm-add-a-new-runstate-RUN_STATE_GUEST_PANICKED.patch [bz#833530]
  - kvm-add-a-new-qevent-QEVENT_GUEST_PANICKED.patch [bz#833530]
  - kvm-introduce-a-new-qom-device-to-deal-with-panicked-eve.patch [bz#833530]
  - kvm-fw_cfg-add-required-header-files.patch [bz#833530]
  - kvm-generalize-rom_set_fw-RHEL-6-only.patch [bz#833530]
  - kvm-pvpanic-pass-configurable-ioport-to-seabios.patch [bz#833530]
  - kvm-pvpanic-add-document-of-pvpanic.patch [bz#833530]
  - kvm-pvpanic-create-pvpanic-by-default-for-machine-1.5.patch [bz#833530]
  - kvm-vl-new-runstate-transition-RUN_STATE_GUEST_PANICKED-.patch [bz#833530]
  - kvm-acpi-drop-debug-port.patch [bz#952240]
  - Resolves: bz#833530
    ([Hitachi 6.5 FEAT] (qemu-kvm) "virsh dump" support for automatic capturing and automatic actions after capturing.)
  - Resolves: bz#952240
    (hot-plugging multi-func devices caused: qemu: hardware error: register_ioport_write: invalid opaque)
  - Resolves: bz#955302
    ([6.5 FEAT] Support for LED state extension to Qemu VNC)
  - Resolves: bz#962378
    (I/O requests of RHEL6.3 KVM guest are hung indefinitely - suspected issue in qcow2_co_flush().)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.375.el6
changelog:
  - kvm-vnc-Make-ledstate-comparison-before-modifiers-update.patch [bz#955302]
  - Resolves: bz#955302
    ([6.5 FEAT] Support for LED state extension to Qemu VNC)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.376.el6
changelog:
  - kvm-Add-option-to-mlock-qemu-and-guest-memory.patch [bz#826340]
  - kvm-pci-assign-Add-MSI-affinity-support.patch [bz#919761]
  - kvm-block-add-block-driver-read-only-whitelist.patch [bz#960685]
  - kvm-qcow2-Reinitialise-counter-when-restarting-allocatio.patch [bz#974617]
  - kvm-scsi-reset-cdrom-tray-statuses-on-scsi_disk_reset.patch [bz#963773]
  - Resolves: bz#826340
    ([Hitachi 6.5 FEAT] Support mlock guest memory)
  - Resolves: bz#919761
    (IRQs are not distributed on a KVM guest correctly.)
  - Resolves: bz#960685
    ([RHEL-6.5] Backport support for vmdk image format)
  - Resolves: bz#963773
    (scsi-cd: tray statuses (locked and open) are not reset on boot/reboot of guest)
  - Resolves: bz#974617
    (qcow2 corruption bug in cluster allocation code)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.377.el6
changelog:
  - ksm.init: Properly handle return value of init scripts [bz#972314]
  - kvm-osdep-add-qemu_get_local_state_pathname.patch [bz#962669]
  - kvm-qga-determine-default-state-dir-and-pidfile-dynamica.patch [bz#962669]
  - kvm-configure-don-t-save-any-fixed-local_statedir-for-wi.patch [bz#962669]
  - kvm-qga-create-state-directory-on-win32.patch [bz#962669]
  - kvm-qga-remove-undefined-behavior-in-ga_install_service.patch [bz#962669]
  - kvm-qga-save-state-directory-in-ga_install_service.patch [bz#962669]
  - kvm-Makefile-create-.-var-run-when-installing-the-POSIX-.patch [bz#962669]
  - kvm-scsi-change-removable-field-to-host-many-features.patch [bz#890011]
  - kvm-scsi-disk-scsi-block-device-for-scsi-pass-through-sh.patch [bz#890011]
  - kvm-use-atexit-for-quit_timers.patch [bz#843797]
  - Resolves: bz#843797
    (qemu-kvm core dumps when virtio-net(w/ tx=timer and vhost=on) RHEL.6(w/ msi-x enabled) guest shutting down)
  - Resolves: bz#890011
    (flooding with 'scsi-generic: execute_command: read failed !' error if eject the pass-through SCSI CD-ROM)
  - Resolves: bz#962669
    (Windows guest agent service failed to be started)
  - Resolves: bz#972314
    (Every upgrade starts 'ksmd' due to broken initscript 'status' function)


author: Miroslav Rezanina <mrezanin@redhat.com> - qemu-kvm-0.12.1.2-2.378.el6
changelog:
  - kvm-qga-diagnostic-output-should-go-to-stderr.patch [bz#976478]
  - kvm-qa_install_service-nest-error-paths-more-idiomatically.patch [bz#976478]
  - kvm-qga-escape-cmdline-args-when-registering-win32-service.patch [bz#976478]
  - Resolves: bz#976478
    (CVE-2013-2231 qemu: qemu-ga win32 service unquoted search path [rhel-6.5])


author: Miroslav Rezanina <mrezanin@redhat.com> - qemu-kvm-0.12.1.2-2.379.el6
changelog:
  - kvm-block-add-the-blockio-limits-command-line-support.patch [bz#956825]
  - kvm-CoQueue-introduce-qemu_co_queue_wait_insert_head.patch [bz#956825]
  - kvm-block-add-I-O-throttling-algorithm.patch [bz#956825]
  - kvm-hmp-qmp-add-block_set_io_throttle.patch [bz#956825]
  - kvm-block-disable-I-O-throttling-on-sync-api.patch [bz#956825]
  - kvm-block-add-the-support-to-drain-throttled-requests.patch [bz#956825]
  - kvm-block-Factor-bdrv_read_unthrottled-out-of-guess_disk.patch [bz#956825]
  - kvm-block-fix-initialization-in-bdrv_io_limits_enable.patch [bz#956825]
  - kvm-qapi-Introduce-blockdev-group-snapshot-sync-comman2.patch [bz#956825]
  - kvm-block-fix-I-O-throttling-accounting-blind-spot.patch [bz#956825]
  - kvm-block-keep-I-O-throttling-slice-time-constant.patch [bz#956825]
  - kvm-block-drop-duplicated-slice-extension-code.patch [bz#956825]
  - kvm-block-clean-up-I-O-throttling-wait_time-code.patch [bz#956825]
  - kvm-ide-convert-ide_sector_read-to-asynchronous-I-O.patch [bz#956825]
  - kvm-ide-convert-ide_sector_write-to-asynchronous-I-O.patch [bz#956825]
  - kvm-serial-add-pci-variant.patch [bz#872015]
  - kvm-serial-fix-error-handling.patch [bz#872015]
  - kvm-qapi-shortcut-visits-on-errors.patch [bz#983635]
  - kvm-qapi-allow-freeing-partially-allocated-objects.patch [bz#983635]
  - kvm-qapi-untangle-next_list.patch [bz#983635]
  - kvm-qapi-fix-error-propagation.patch [bz#983635]
  - Resolves: bz#872015
    (A Windows VM can only see 2 of 4 assigned COM ports (Serial Devices))
  - Resolves: bz#956825
    (Backport IO throttling into RHEL 6.x KVM)
  - Resolves: bz#983635
    (QMP: bad input crashes QEMU)
  - Resolves: bz#977760
    (fail to boot guest attaching with vmdk format data disk(virito/virtio-scsi interface))


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.380.el6
changelog:
  - kvm-kvmclock-clock-should-count-only-if-vm-is-running.patch [bz#903454]
  - kvm-spice-Add-spice-disable-agent-file-transfer-cmdline-.patch [bz#961850]
  - Update spice-server requirement [bz#961850]
  - Resolves: bz#903454
    (kvm guest crash after long stop/cont cycle)
  - Resolves: bz#961850
    (RFE: add -spice disable-agent-file-transfer cmdline option)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.381.el6
changelog:
  - kvm-qemu-char-Set-foo_tag-0-when-returning-FALSE-from-ca.patch [bz#676568]
  - kvm-qapi-generate-correct-enum-names-for-camel-case-enum.patch [bz#676568]
  - kvm-qapi-don-t-convert-enum-strings-to-lowercase.patch [bz#676568]
  - kvm-qapi-avoid-reserved-keywords.patch [bz#676568]
  - kvm-qapi-do-not-protect-enum-values-from-namespace-pollu.patch [bz#676568]
  - kvm-qapi-add-unix-to-the-set-of-reserved-words.patch [bz#676568]
  - kvm-qapi-generate-C-types-for-fixed-width-integers.patch [bz#676568]
  - kvm-qapi-Add-Visitor-interfaces-for-uint-_t-and-int-_t.patch [bz#676568]
  - kvm-qapi-add-String.patch [bz#676568]
  - kvm-qapi-add-socket-address-types.patch [bz#676568]
  - kvm-qmp-add-and-use-q-type-specifier.patch [bz#676568]
  - kvm-qemu-Add-opt_set_bool-functionality.patch [bz#676568]
  - kvm-build-add-QAPI-files-to-the-tools.patch [bz#676568]
  - kvm-qemu-sockets-unix_listen-and-unix_connect-are-portab.patch [bz#676568]
  - kvm-qemu-sockets-add-nonblocking-connect-for-Unix-socket.patch [bz#676568]
  - kvm-qemu-sockets-include-strerror-or-gai_strerror-output.patch [bz#676568]
  - kvm-qemu-sockets-add-error-propagation-to-inet_connect_a.patch [bz#676568]
  - kvm-qemu-sockets-add-error-propagation-to-inet_dgram_opt.patch [bz#676568]
  - kvm-qemu-sockets-add-error-propagation-to-inet_parse.patch [bz#676568]
  - kvm-qemu-sockets-add-error-propagation-to-Unix-socket-fu.patch [bz#676568]
  - kvm-qemu-ga-drop-temporary-extra-check-for-unix_listen-r.patch [bz#676568]
  - kvm-qemu-sockets-return-InetSocketAddress-from-inet_pars.patch [bz#676568]
  - kvm-qemu-sockets-add-socket_listen-socket_connect-socket.patch [bz#676568]
  - kvm-qemu-sockets-Fix-parsing-of-the-inet-option-to.patch [bz#676568]
  - kvm-qemu-socket-set-passed-fd-non-blocking-in-socket_con.patch [bz#676568]
  - kvm-qemu-char-ask-and-print-error-information-from-qemu-.patch [bz#676568]
  - kvm-vnc-avoid-Yoda-conditionals.patch [bz#676568]
  - kvm-vnc-introduce-a-single-label-for-error-returns.patch [bz#676568]
  - kvm-vnc-add-error-propagation-to-vnc_display_open.patch [bz#676568]
  - kvm-chardev-add-error-reporting-for-qemu_chr_new_from_op.patch [bz#676568]
  - kvm-chardev-fix-QemuOpts-lifecycle.patch [bz#676568]
  - kvm-chardev-reduce-chardev-ifdef-mess-a-bit.patch [bz#676568]
  - kvm-chardev-add-qmp-hotplug-commands-with-null-chardev-s.patch [bz#676568]
  - kvm-chardev-add-file-chardev-support-to-chardev-add-qmp.patch [bz#676568]
  - kvm-chardev-add-serial-chardev-support-to-chardev-add-qm.patch [bz#676568]
  - kvm-chardev-add-parallel-chardev-support-to-chardev-add-.patch [bz#676568]
  - kvm-chardev-add-socket-chardev-support-to-chardev-add-qm.patch [bz#676568]
  - kvm-chardev-add-pty-chardev-support-to-chardev-add-qmp.patch [bz#676568]
  - kvm-qemu-char-Avoid-unused-variable-warning-in-some-conf.patch [bz#676568]
  - kvm-qapi-Flatten-away-ChardevPort.patch [bz#676568]
  - kvm-qemu-char-make-char-drivers-dynamically-registerable.patch [bz#676568]
  - kvm-qemu-char-move-spice-registration-to-spice-qemu-char.patch [bz#676568]
  - kvm-qemu-char-move-baum-registration-to-baum.c.patch [bz#676568]
  - kvm-qemu-char-move-msmouse-registeration-to-msmouse.c.patch [bz#676568]
  - kvm-qemu-char-move-text-console-init-to-console.c.patch [bz#676568]
  - kvm-qemu-char.c-fix-waiting-for-telnet-connection-messag.patch [bz#676568]
  - kvm-chardev-add-support-for-qapi-based-chardev-initializ.patch [bz#676568]
  - kvm-chardev-add-mux-chardev-support-to-qapi.patch [bz#676568]
  - kvm-chardev-switch-null-init-to-qapi.patch [bz#676568]
  - kvm-chardev-add-msmouse-support-to-qapi.patch [bz#676568]
  - kvm-chardev-add-braille-support-to-qapi.patch [bz#676568]
  - kvm-chardev-switch-file-init-to-qapi.patch [bz#676568]
  - kvm-chardev-add-stdio-support-to-qapi.patch [bz#676568]
  - kvm-chardev-switch-serial-tty-init-to-qapi.patch [bz#676568]
  - kvm-chardev-switch-parallel-init-to-qapi.patch [bz#676568]
  - kvm-chardev-switch-pty-init-to-qapi.patch [bz#676568]
  - kvm-chardev-add-console-support-to-qapi.patch [bz#676568]
  - kvm-chardev-add-pipe-support-to-qapi.patch [bz#676568]
  - kvm-chardev-add-spice-support-to-qapi.patch [bz#676568]
  - kvm-create-TextConsole-together-with-the-CharDeviceState.patch [bz#676568]
  - kvm-remove-text_console_opts.patch [bz#676568]
  - kvm-chardev-add-vc-support-to-qapi.patch [bz#676568]
  - kvm-chardev-add-memory-ringbuf-support-to-qapi.patch [bz#676568]
  - kvm-chardev-add-udp-support-to-qapi.patch [bz#676568]
  - kvm-chardev-fix-info-chardev-output.patch [bz#676568]
  - Resolves: bz#676568
    (RFE: support hotplugging chardev & virtio-serial ports)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.382.el6
changelog:
  - kvm-vmdk-remove-wrong-calculation-of-relative-path.patch [bz#977767]
  - kvm-Fix-real-mode-guest-migration.patch [bz#888767]
  - kvm-Fix-real-mode-guest-segments-dpl-value-in-savevm.patch [bz#888767]
  - kvm-virtio-scsi-enable-MSI-X-support.patch [bz#987025]
  - Resolves: bz#888767
    ("kvm: unhandled exit 80000021" when migrating to some hosts)
  - Resolves: bz#977767
    (there is wrong backing file specified for making external snapshot with vmdk format disk)
  - Resolves: bz#987025
    (enable MSI-X for virtio-scsi)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.383.el6
changelog:
  - kvm-virtio-net-properly-check-the-vhost-status-during-st.patch [bz#957319]
  - kvm-configure-add-option-for-io-throttling-RHEL-6-only.patch [bz#975468]
  - kvm-Only-enable-IO-throttling-for-RHEV.patch [bz#975468]
  - kvm-qapi-qapi-commands-fix-possible-leaks-on-visitor-dea.patch [bz#990316]
  - Resolves: bz#957319
    (Guest w/ vhost=on over virtio-net-pci, under hmp, 'set_link $id_of_netdev off', then migrate, migrate failed, src qemu-kvm process core dumped)
  - Resolves: bz#975468
    (RFE: Enable qemu IO throttling only in qemu-kvm-rhev)
  - Resolves: bz#990316
    (QMP: possible memory leaks on commands failure)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.384.el6
changelog:
  - kvm-Fix-compilation-of-I-O-throttling.patch [bz#975468]
  - Resolves: bz#975468
    (RFE: Enable qemu IO throttling only in qemu-kvm-rhev)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.385.el6
changelog:
  - kvm-ccid-card-emul-do-not-crash-if-backend-is-not-provid.patch [bz#917860]
  - kvm-ccid-make-backend_enum_table-static-const-and-adjust.patch [bz#917860]
  - kvm-ccid-declare-DEFAULT_ATR-table-to-be-static-const.patch [bz#917860]
  - kvm-libcacard-vscclient-fix-error-paths-for-socket-creat.patch [bz#917860]
  - kvm-libcacard-Use-format-specifier-u-instead-of-d-for-un.patch [bz#917860]
  - kvm-Spelling-fixes-in-comments-it-s-its.patch [bz#917860]
  - kvm-libcacard-Fix-unchecked-strdup-by-converting-to-g_st.patch [bz#917860]
  - kvm-libcacard-split-vscclient-main-from-socket-reading.patch [bz#917860]
  - kvm-libcacard-vscclient-to-use-QemuThread-for-portabilit.patch [bz#917860]
  - kvm-libcacard-teach-vscclient-to-use-GMainLoop-for-porta.patch [bz#917860]
  - kvm-libcacard-use-system-config-directory-for-nss-db-on-.patch [bz#917860]
  - kvm-libcacard-remove-sql-prefix.patch [bz#917860]
  - kvm-libcacard-remove-default-libcoolkey-loading.patch [bz#917860]
  - kvm-dev-smartcard-reader-nicer-debug-messages.patch [bz#917860]
  - kvm-hw-usb-dev-smartcard-reader.c-remove-aborts-never-tr.patch [bz#917860]
  - kvm-hw-usb-dev-smartcard-reader-support-windows-guest.patch [bz#917860]
  - kvm-libcacard-change-default-ATR.patch [bz#917860]
  - kvm-hw-ccid-card-passthru.c-add-atr-check.patch [bz#917860]
  - kvm-ccid-card-passthru-dev-smartcard-reader-add-debug-en.patch [bz#917860]
  - kvm-usb-ccid-Drop-unused-CCIDCardInfo-callback-print.patch [bz#917860]
  - kvm-hw-usb-dev-smartcard-reader.c-define-structs-for-CCI.patch [bz#917860]
  - kvm-dev-smartcard-reader-change-default-protocol-to-T-0.patch [bz#917860]
  - kvm-dev-smartcard-reader-copy-atr-protocol-to-ccid-param.patch [bz#917860]
  - kvm-libcacard-vreader-add-debugging-messages-for-apdu.patch [bz#917860]
  - kvm-dev-smartcard-reader-empty-implementation-for-Mechan.patch [bz#917860]
  - kvm-libcacard-cac-change-big-switch-functions-to-single-.patch [bz#917860]
  - kvm-usb-smartcard-reader-Properly-NAK-interrupt-eps-when.patch [bz#917860]
  - kvm-uhci-Don-t-allow-the-guest-to-set-port-enabled-when-.patch [bz#917860]
  - kvm-usb-ccid-remote-wakeup-support.patch [bz#917860]
  - kvm-uhci-egsm-fix.patch [bz#917860]
  - kvm-virtio-net-dynamic-network-offloads-configuration.patch [bz#990225]
  - kvm-char-io_channel_send-don-t-lose-written-bytes.patch [bz#985334]
  - kvm-monitor-maintain-at-most-one-G_IO_OUT-watch.patch [bz#985334]
  - kvm-register-exit-function-after-starting-timers.patch [bz#843797]
  - kvm-virtio-properly-validate-address-before-accessing-co.patch [bz#956953]
  - Resolves: bz#843797
    (qemu-kvm core dumps when virtio-net(w/ tx=timer and vhost=on) RHEL.6(w/ msi-x enabled) guest shutting down)
  - Resolves: bz#917860
    (Smartcard emulation with Windows guest fails)
  - Resolves: bz#956953
    (insufficient address validation during config access of virtio device)
  - Resolves: bz#985334
    (query mem info from monitor would cause qemu-kvm hang [RHEL-6.5])
  - Resolves: bz#990225
    ([RHEV/RHEL] Integrate dynamic offloads into virtio-net device)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.386.el6
changelog:
  - kvm-block-fix-initialization-of-IO-limits-for-RHEL.patch [bz#994374]
  - Resolves: bz#994374
    (boot up guest failed, hung in "booting from hard disk")


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.387.el6
changelog:
  - kvm-Add-spent-time-for-migration.patch [bz#981235]
  - kvm-migration-print-total-downtime-for-final-phase-of-mi.patch [bz#981235]
  - kvm-blockdev-reset-werror-rerror-on-drive_del.patch [bz#970159]
  - kvm-scsi-generic-fix-sign-extension-of-READ-CAPACITY-10-.patch [bz#963151]
  - Resolves: bz#963151
    ([FJ6.4 Bug] Once a guest OS issues READ_CAPACITY(10), it becomes unable to access beyond 2TB on the disk)
  - Resolves: bz#970159
    (qemu-kvm-rhevm [race]: vm pauses with 'block I/O error in device '': No medium found (123)' when hounplug a disk and cannot be resumed)
  - Resolves: bz#981235
    (RFE: Request detail migration statistics output for live migration on RHEL6.5)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.388.el6
changelog:
  - kvm-vmdk-fix-comment-for-vmdk_co_write_zeroes.patch [bz#994804]
  - kvm-vmdk-Make-VMDK3Header-and-VmdkGrainMarker-QEMU_PACKE.patch [bz#994804]
  - kvm-vmdk-byteswap-VMDK4Header.desc_offset-field.patch [bz#994804]
  - kvm-vmdk-use-unsigned-values-for-on-disk-header-fields.patch [bz#994804]
  - kvm-vmdk-check-granularity-field-in-opening.patch [bz#994804]
  - kvm-vmdk-refuse-to-open-higher-version-than-supported.patch [bz#994804]
  - kvm-vmdk-check-l2-table-size-when-opening.patch [bz#994804]
  - kvm-vmdk-check-l1-size-before-opening-image.patch [bz#994804]
  - kvm-vmdk-use-heap-allocation-for-whole_grain.patch [bz#994804]
  - kvm-vmdk-rename-num_gtes_per_gte-to-num_gtes_per_gt.patch [bz#994804]
  - kvm-vmdk-Allow-reading-variable-size-descriptor-files.patch [bz#994804]
  - kvm-qemu-char-Fix-ID-reuse-after-chardev-remove-for-qapi.patch [bz#994891]
  - kvm-dataplane-refuse-to-start-if-device-is-already-in-us.patch [bz#995530]
  - Resolves: bz#994804
    (qemu-kvm should verify image header fields before opening VMDK)
  - Resolves: bz#994891
    (duplicate chardev reported after chardev-remove)
  - Resolves: bz#995530
    (dataplane: refuse to start if device is already in use)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.389.el6
changelog:
  - kvm-qemu-socket-zero-initialize-SocketAddress.patch [bz#676568]
  - kvm-qemu-socket-drop-pointless-allocation.patch [bz#676568]
  - kvm-qemu-char-check-optional-fields-using-has_.patch [bz#676568]
  - kvm-qemu-char-use-more-specific-error_setg_-variants.patch [bz#676568]
  - kvm-qemu-char-print-notification-to-stderr.patch [bz#676568]
  - kvm-qemu-char-fix-documentation-for-telnet-wait-socket-f.patch [bz#676568]
  - kvm-qemu-char-don-t-leak-opts-on-error.patch [bz#676568]
  - kvm-qemu-char-use-ChardevBackendKind-in-CharDriver.patch [bz#676568]
  - kvm-qemu-char-minor-mux-chardev-fixes.patch [bz#676568]
  - kvm-qemu-char-add-chardev-mux-support.patch [bz#676568]
  - kvm-qemu-char-report-udp-backend-errors.patch [bz#676568]
  - kvm-qemu-socket-don-t-leak-opts-on-error.patch [bz#676568]
  - kvm-block-Allow-IO-throttling-fields-in-__com.redhat_dri.patch [bz#987745]
  - kvm-qemu-add-castagnoli-crc32c-checksum-algorithm.patch [bz#963420]
  - kvm-block-vhdx-header-for-the-QEMU-support-of-VHDX-image.patch [bz#963420]
  - kvm-block-initial-VHDX-driver-support-framework-supports.patch [bz#963420]
  - kvm-block-add-read-only-support-to-VHDX-image-format.patch [bz#963420]
  - Resolves: bz#676568
    (RFE: support hotplugging chardev & virtio-serial ports)
  - Resolves: bz#963420
    ([RHEL-6.5] Backport support for vhd(x) image format)
  - Resolves: bz#987745
    (fail to do hotplug with qemu i/o throttling including iops,iops_wr,iops_rd,bps,bps_wr,bps_rd inofs)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.390.el6
changelog:
  - Disable qemu-guest-agent for Win32 build [bz#996580]
  - kvm-Do-not-quit-QEMU-if-cpu-set-is-called-in-non-ACPI-mo.patch [bz#990237]
  - kvm-acl-Fix-acl_remove-not-to-mess-up-the-ACL.patch [bz#889255]
  - kvm-acl-acl_add-can-t-insert-before-last-list-element-fi.patch [bz#970516]
  - kvm-hw-misc-don-t-create-pvpanic-device-by-default.patch [bz#991100]
  - kvm-hw-misc-make-pvpanic-known-to-user.patch [bz#991100]
  - Resolves: bz#889255
    (Monitor command acl_remove messes up the ACL)
  - Resolves: bz#970516
    (Monitor command acl_add can't insert before last list element)
  - Resolves: bz#990237
    (qemu-kvm exits when hotplugging a cpu with --no-acpi)
  - Resolves: bz#991100
    (pvpanic device triggers guest bugs when present by default)
  - Resolves: bz#996580
    (Remove qemu-ga-win32 from our rpm packages)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.391.el6
changelog:
  - Set qemu-guest-agent to be started automatically [bz#888297]
  - kvm-migration-add-migrate_set_state-tracepoint.patch [bz#903429]
  - kvm-vl-add-runstate_set-tracepoint.patch [bz#903429]
  - kvm-all-add-kvm_ioctl-kvm_vm_ioctl-kvm_vcpu_ioctl-tr.patch [bz#903429]
  - kvm-all-add-kvm_run_exit-tracepoint.patch [bz#903429]
  - kvm-aio-Fix-qemu_aio_wait-to-maintain-correct-walking_ha.patch [bz#848070]
  - kvm-aio-Another-fix-to-the-walking_handlers-logic.patch [bz#848070]
  - kvm-qemu-URI-parsing-library.patch [bz#848070]
  - kvm-qemu-tool-Add-dummy-qemu_mutex_lock_iothread-and-qem.patch [bz#848070]
  - kvm-block-Support-GlusterFS-as-a-QEMU-block-backend.patch [bz#848070]
  - kvm-configure-Add-a-config-option-for-GlusterFS-as-block.patch [bz#848070]
  - kvm-qcow2-Simplify-image-creation.patch [bz#848070]
  - kvm-block-Produce-zeros-when-protocols-reading-beyond-en.patch [bz#848070]
  - kvm-block-vdi-Fix-wrong-size-in-conditionally-used-memse.patch [bz#848070]
  - kvm-qcow2-Remove-old-image-creation-function.patch [bz#848070]
  - kvm-gluster-Add-image-resize-support.patch [bz#848070]
  - kvm-vdi-don-t-override-libuuid-symbols.patch [bz#848070]
  - kvm-gluster-Return-bdrv_has_zero_init-0.patch [bz#848070]
  - kvm-qcow2-Really-use-cache-unsafe-for-image-creation.patch [bz#848070]
  - kvm-gluster-Handle-BDRV_O_CACHE_WB-in-gluster-driver.patch [bz#848070]
  - Resolves: bz#848070
    ([RHEL 6.5] Add glusterfs support to qemu)
  - Resolves: bz#888297
    (qemu-ga should be enabled right after installation)
  - Resolves: bz#903429
    ([Fujitsu 6.5 FEAT]: QEMU: Add tracepoints in live migration processing.)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.392.el6
changelog:
  - Whitelist rbd block driver [bz#988079]
  - kvm-ceph-rbd-block-driver-for-qemu-kvm.patch [bz#988079]
  - kvm-rbd-link-and-load-librbd-dynamically.patch [bz#988079]
  - kvm-rbd-Only-look-for-qemu-specific-copy-of-librbd.so.1.patch [bz#988079]
  - kvm-Build-rbd-block-driver-only-for-qemu-kvm-rhev.patch [bz#988079]
  - kvm-block-call-the-snapshot-handlers-of-the-protocol-dri.patch [bz#988079]
  - Resolves: bz#988079
    ([6.5 FEAT] qemu runtime support for librbd backend (ceph))


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.393.el6
changelog:
  - kvm-add-timestamp-to-error_report.patch [bz#906931]
  - kvm-Convert-stderr-message-calling-error_get_pretty-to-e.patch [bz#906931]
  - Resolves: bz#906931
    ([Hitachi 6.5 FEAT][QEMU]Add a time stamp to error message (*))


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.394.el6
changelog:
  - kvm-dump-clamp-guest-provided-mapping-lengths-to-rambloc.patch [bz#989585]
  - kvm-dump-introduce-GuestPhysBlockList.patch [bz#989585]
  - kvm-dump-populate-guest_phys_blocks.patch [bz#989585]
  - kvm-dump-rebase-from-host-private-RAMBlock-offsets-to-gu.patch [bz#989585]
  - kvm-virtio-net-remove-layout-assumptions-for-ctrl-vq.patch [bz#904927]
  - kvm-virtio-net-introduce-a-new-macaddr-control.patch [bz#904927]
  - kvm-net-add-compat-property-to-disable-ctrl_mac_addr-fea.patch [bz#904927]
  - kvm-virtio-net-rename-ctrl-rx-commands.patch [bz#904927]
  - kvm-target-i386-fix-bits-39-32-of-the-final-physical-add.patch [bz#880990]
  - kvm-qxl-Don-t-drop-client-capability-bits.patch [bz#880990]
  - kvm-block-fix-null-pointer-bug-on-error-case-in-block-co.patch [bz#880990]
  - Resolves: bz#880990
    ([coverity] suspicious use of sizeof, bad use of strncpy(), etc)
  - Resolves: bz#904927
    (RFE: (qemu) Introduce a vq command to robust virtio net mac programming)
  - Resolves: bz#989585
    (crash command can not read the dump-guest-memory file when paging=false [RHEL-6])


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.396.el6
changelog:
  - Fix glusterfs support in the qemu white-list
  - Related: bz#848070
    ([RHEL 6.5] Add glusterfs support to qemu)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.397.el6
changelog:
  - kvm-block-Decouple-block-device-commit-all-from-DriveInf.patch [bz#856505]
  - kvm-block-Monitor-command-commit-neglects-to-report-some.patch [bz#856505]
  - kvm-block-for-HMP-commit-operations-on-all-skip-non-COW-.patch [bz#856505]
  - Resolves: bz#856505
    (Missing error message in bdrv_commit to read-only backing file)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.398.el6
changelog:
  - kvm-block-use-Error-in-do_check_io_limits.patch [bz#987725]
  - kvm-block-refuse-negative-iops-and-bps-values.patch [bz#987725]
  - Resolves: bz#987725
    (Guest should failed to be booted if specifying iops,bps as negative value)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.399.el6
changelog:
  - kvm-block-migration-propagate-return-value-when-bdrv_wri.patch [bz#994813]
  - kvm-block-migration-actually-disable-dirty-tracking-on-c.patch [bz#994813]
  - kvm-Fix-off-by-one-error-in-page_l1_map.patch [bz#996791]
  - Resolves: bz#994813
    ([FJ6.4 Bug] the guest doesn't operate normally after block live migration with out of disk space)
  - Resolves: bz#996791
    (Off-by-one error in page_l1_map() can lead to out-of-bounds access)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.400.el6
changelog:
  - kvm-vmdk-Move-l1_size-check-into-vmdk_add_extent.patch [bz#995865]
  - kvm-vmdk-fix-L1-and-L2-table-size-in-vmdk3-open.patch [bz#995865]
  - kvm-vmdk-support-vmfsSparse-files.patch [bz#995865]
  - kvm-vmdk-support-vmfs-files.patch [bz#995865]
  - kvm-block-initialize-do_check_io_limits-error-pointer-to.patch [bz#1001436]
  - kvm-gluster-Abort-on-AIO-completion-failure.patch [bz#997220]
  - Resolves: bz#1001436
    (Qemu core dumped when set iops,bps... to a negative value var monitor)
  - Resolves: bz#995865
    (fix vmdk support to ESX images)
  - Resolves: bz#997220
    (Race in gluster_finish_aiocb)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.401.el6
changelog:
  - Add block VHD/VPC format to block driver whitelist [bz#999779]
  - kvm-block-vpc-Fix-conversion-from-size-to-disk-geometry.patch [bz#999779]
  - kvm-vpc-Read-write-multiple-sectors-at-once.patch [bz#999779]
  - kvm-vpc-Use-bdrv_-p-write_sync-for-metadata-writes.patch [bz#999779]
  - kvm-vpc-fix-a-file-descriptor-leak.patch [bz#999779]
  - kvm-vpc.c-Use-get_option_parameter-does-the-search.patch [bz#999779]
  - kvm-block-vpc.c-Detect-too-large-vpc-file.patch [bz#999779]
  - kvm-vpc-Add-missing-error-handling-in-alloc_block.patch [bz#999779]
  - kvm-vpc-Add-support-for-Fixed-Disk-type.patch [bz#999779]
  - kvm-vpc-Round-up-image-size-during-fixed-image-creation.patch [bz#999779]
  - kvm-block-vpc-initialize-the-uuid-footer-field.patch [bz#999779]
  - kvm-block-vpc-support-for-2-TB-disks.patch [bz#999779]
  - kvm-vpc-Fix-bdrv_open-error-handling.patch [bz#999779]
  - Resolves: bz#999779
    (Add vpc file format support in qemu-kvm)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.402.el6
changelog:
  - Move VPC from r/w whitelist to r/o whitelist [bz#999779]
  - kvm-migrate-add-migration-blockers.patch [bz#999779]
  - kvm-qed-add-migration-blocker-v2.patch [bz#999779]
  - kvm-qed-remove-incoming-live-migration-blocker.patch [bz#999779]
  - kvm-vpc-Add-migration-blocker.patch [bz#999779]
  - Resolves: bz#999779
    (Add vpc file format support in qemu-kvm)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.403.el6
changelog:
  - kvm-block-Remove-semicolon-in-BDRV_SECTOR_MASK-macro.patch [bz#914802]
  - kvm-block-implement-is_allocated-for-raw.patch [bz#914802]
  - kvm-qemu-io-fix-the-alloc-command.patch [bz#914802]
  - kvm-stream-complete-early-if-end-of-backing-file-is-reac.patch [bz#914802]
  - kvm-block-cow-Return-real-error-code.patch [bz#914802]
  - kvm-cow-Use-bdrv_-p-write_sync-for-metadata-writes.patch [bz#914802]
  - kvm-cow-make-reads-go-at-a-decent-speed.patch [bz#914802]
  - kvm-cow-make-writes-go-at-a-less-indecent-speed.patch [bz#914802]
  - kvm-cow-do-not-call-bdrv_co_is_allocated.patch [bz#914802]
  - kvm-block-keep-bs-total_sectors-up-to-date-even-for-grow.patch [bz#914802]
  - kvm-block-make-bdrv_co_is_allocated-static.patch [bz#914802]
  - kvm-block-do-not-use-total_sectors-in-bdrv_co_is_allocat.patch [bz#914802]
  - kvm-block-remove-bdrv_is_allocated_above-bdrv_co_is_allo.patch [bz#914802]
  - kvm-block-expect-errors-from-bdrv_co_is_allocated.patch [bz#914802]
  - kvm-qemu-img-always-probe-the-input-image-for-allocated-.patch [bz#914802]
  - kvm-block-make-bdrv_has_zero_init-return-false-for-copy-.patch [bz#914802]
  - kvm-block-introduce-bdrv_get_block_status-API.patch [bz#914802]
  - kvm-block-define-get_block_status-return-value.patch [bz#914802]
  - kvm-block-return-get_block_status-data-and-flags-for-for.patch [bz#914802]
  - kvm-block-use-bdrv_has_zero_init-to-return-BDRV_BLOCK_ZE.patch [bz#914802]
  - kvm-block-return-BDRV_BLOCK_ZERO-past-end-of-backing-fil.patch [bz#914802]
  - kvm-qemu-img-add-a-map-subcommand.patch [bz#914802]
  - kvm-docs-qapi-document-qemu-img-map.patch [bz#914802]
  - kvm-block-add-default-get_block_status-implementation-fo.patch [bz#914802]
  - kvm-qemu-img-fix-invalid-JSON.patch [bz#914802]
  - Resolves: bz#914802
    (Support backup vendors in qemu to access qcow disk readonly (qemu-img metadata dump))


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.404.el6
changelog:
  - kvm-target-i386-kvm-save-restore-steal-time-MSR.patch [bz#903123]
  - Resolves: bz#903123
    (The value of steal time in "top" command always is "0.0% st" after guest migration)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.405.el6
changelog:
  - kvm-Revert-usb-hub-report-status-changes-only-once.patch [bz#1002888]
  - kvm-virtio-net-revert-mac-on-reset.patch [bz#890265]
  - kvm-virtio-net-fix-up-HMP-NIC-info-string-on-reset.patch [bz#890265]
  - Resolves: bz#1002888
    (usb hub doesn't work properly (win2012 sees downstream port #1 only))
  - Resolves: bz#890265
    (change the mac of virtio_net device temporary but will effect forever after reboot guest)


author: Miroslav Rezanina <mrezanin@redhat.com> - qemu-kvm-0.12.1.2-2.406.el6
changelog:
  - Reverted spurious fix for BZ 981623 [bz#1010930]
  - Resolves: bz#1010930
    (Qemu-kvm-rhev build verifytest failed (rpm -V))


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.407.el6
changelog:
  - kvm-usb-host-remove-message.patch [bz#1003771]
  - Qemu guest agent - move logfiles to new directory for easier SELinux tagging [bz#1009431]
  - kvm-qemu-kvm-fix-reset-value-of-MSR_PAT.patch [bz#976706]
  - Resolves: bz#1003771
    (warning msg not correct after hotplug invalid usb-host to guest)
  - Resolves: bz#1009431
    (move qga logfiles to new /var/log/qemu-ga/ directory)
  - Resolves: bz#976706
    ([HP BCS 6.5 Bug]Guest OS cannot boot after first reboot when enabling SR-IOV feature)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.408.el6
changelog:
  - Fix Qemu guest agent - move logfiles to new directory for easier SELinux tagging [bz#1009431]
  - kvm-block-Introduce-bs-zero_beyond_eof.patch [bz#1007224]
  - Resolves: bz#1007224
    (Introduce bs->zero_beyond_eof)
  - Resolves: bz#1009431
    (move qga logfiles to new /var/log/qemu-ga/ directory)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.409.el6
changelog:
  - kvm-exec-Simplify-allocation-of-guest-RAM.patch [bz#867921]
  - kvm-exec-Don-t-abort-when-we-can-t-allocate-guest-memory.patch [bz#867921]
  - kvm-block-better-error-message-for-read-only-format-name.patch [bz#999788]
  - kvm-vmdk-Add-migration-blocker.patch [bz#999358]
  - kvm-scsi-Fix-scsi_bus_legacy_add_drive-scsi-generic-with.patch [bz#1013478]
  - kvm-Add-support-for-JSON-pretty-printing.patch [bz#1010610]
  - kvm-qemu-img-add-dirty-flag-status.patch [bz#1010610]
  - kvm-qemu-img-make-info-backing-file-output-correct-and-e2.patch [bz#1010610]
  - kvm-qapi-Add-SnapshotInfo-and-ImageInfo.patch [bz#1010610]
  - kvm-qemu-img-Add-json-output-option-to-the-info-command.patch [bz#1010610]
  - kvm-qemu-img-Add-backing-chain-option-to-info-command.patch [bz#1010610]
  - kvm-block-get_block_status-set-pnum-0-on-error.patch [bz#1010610]
  - kvm-block-get_block_status-avoid-segfault-if-there-is-no.patch [bz#1010610]
  - Resolves: bz#1010610
    (Backport  option "--output=json|human" to qemu-img info command)
  - Resolves: bz#1013478
    (-device usb-storage,serial=... crashes with SCSI generic drive)
  - Resolves: bz#867921
    ([RFE] Nicer error report when qemu-kvm can't allocate guest RAM)
  - Resolves: bz#999358
    (do live migration with used VMDK format disk should fail with a friendly message prompt)
  - Resolves: bz#999788
    (qemu should give a more friendly prompt when didn't specify read-only for VMDK format disk)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.410.el6
changelog:
  - kvm-chardev-fix-pty_chr_timer.patch [bz#995341]
  - Resolves: bz#995341
    (hot-unplug chardev with pty backend caused qemu Segmentation fault)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.411.el6
changelog:
  - kvm-block-don-t-lose-data-from-last-incomplete-sector.patch [bz#1009370]
  - kvm-vmdk-fix-cluster-size-check-for-flat-extents.patch [bz#1009370]
  - Resolves: bz#1009370
    (qemu-img refuses to open the vmdk format image its created)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.412.el6
changelog:
  - kvm-char-move-backends-io-watch-tag-to-CharDriverState.patch [bz#985205]
  - kvm-char-use-common-function-to-disable-callbacks-on-cha.patch [bz#985205]
  - kvm-char-remove-watch-callback-on-chardev-detach-from-fr.patch [bz#985205]
  - kvm-os-posix-block-SIGUSR2-in-os_setup_early_signal_hand.patch [bz#996814]
  - Resolves: bz#985205
    (QEMU core dumped when do hot-unplug virtio serial port during transfer file between host to guest with virtio serial through TCP socket)
  - Resolves: bz#996814
    (boot image with gluster native mode cant work with attach another device from local file system)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.413.el6
changelog:
  - kvm-scsi-Allocate-SCSITargetReq-r-buf-dynamically-CVE-20.patch [bz#1007330]
  - kvm-scsi-Fix-data-length-SCSI_SENSE_BUF_SIZE.patch [bz#956929]
  - Resolves: bz#1007330
    (CVE-2013-4344 qemu: buffer overflow in scsi_target_emulate_report_luns)
  - Resolves: bz#956929
    (/usr/libexec/qemu-kvm was killed by signal 6 (SIGABRT) when SCSI inquiry is sent to unsupported page inside the KVM guest)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.414.el6
changelog:
  - kvm-vmstate-Add-max_version_id-field-to-VMStateDescripti.patch [bz#1016736]
  - kvm-savevm-Introduce-max_version_id-field-to-SaveStateEn.patch [bz#1016736]
  - kvm-i386-Set-cpu-section-version_id-to-11.patch [bz#1016736]
  - kvm-qemu-ga-execute-fsfreeze-freeze-in-reverse-order-of-.patch [bz#1015633]
  - Resolves: bz#1015633
    (qemu-guest-agent: "guest-fsfreeze-freeze" deadlocks if the guest have mounted disk images)
  - Resolves: bz#1016736
    (CPU migration data has version_id 12 but version 11 format)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.415.el6
changelog:
  - kvm-target-i386-don-t-migrate-steal-time-MSR-on-older-ma.patch [bz#1022821]
  - Resolves: bz#1022821
    (live-migration from RHEL6.5 to RHEL6.4.z fails with "error while loading state for instance 0x0 of device 'cpu'")


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.416.el6
changelog:
  - kvm-block-Avoid-unecessary-drv-bdrv_getlength-calls.patch [bz#1022548]
  - Resolves: bz#1022548
    (Read/Randread/Randrw performance regression)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.417.el6
changelog:
  - kvm-block-Round-up-total_sectors.patch [bz#1022548 bz#1025596]
  - kvm-monitor-monitor_puts-bail-out-when-mon-NULL.patch [bz#1015979]
  - Resolves: bz#1015979
    ([FJ6.5 Bug]:[REG] live migration with "--copy-storage-{all,inc}" option fails)
  - Resolves: bz#1022548
    (Read/Randread/Randrw performance regression)
  - Resolves: bz#1025596
    (Read/Randread/Randrw performance regression)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.418.el6
changelog:
  - kvm-qcow2-Flush-image-after-creation.patch [bz#1018451]
  - kvm-vmdk-Fix-vmdk_parse_extents.patch [bz#1028252]
  - kvm-vmdk-fix-VMFS-extent-parsing.patch [bz#1028252]
  - Resolves: bz#1018451
    ('qemu-img info' take too much time with 'cluster_size=512,preallocation=metadata' in the first time)
  - Resolves: bz#1028252
    (fix vmdk support to ESX images)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.419.el6
changelog:
  - kvm-qxl-fix-local-renderer.patch [bz#1005037]
  - kvm-qxl-Fix-QXLRam-initialisation.patch [bz#1013300]
  - kvm-virtio-net-broken-RX-filtering-logic-fixed.patch [bz#1010688]
  - Resolves: bz#1005037
    (When using “-vga qxl” together with “-display vnc=:5” or “-display  sdl” qemu displays  pixel garbage)
  - Resolves: bz#1010688
    ([whql][netkvm][wlk] Virtio-net device handles RX multicast filtering improperly)
  - Resolves: bz#1013300
    (Guest coredump while boot guest with " MALLOC_PERTURB_=234 ....--vnc :10,acl,sasl -vga qxl")


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.420.el6
changelog:
  - kvm-build-add-rules-for-nesting.patch [bz#786407]
  - kvm-build-add-rule-to-create-directories.patch [bz#786407]
  - kvm-support-to-nested-declare-for-common-obj-y.patch [bz#786407]
  - kvm-qapi-add-string-based-visitors.patch [bz#786407]
  - kvm-introduce-two-error-to-qerror.h.patch [bz#786407]
  - kvm-qom-Unify-type-registration.patch [bz#786407]
  - kvm-qom-add-QEMU-Object-Model-infrastructure.patch [bz#786407]
  - kvm-vl-add-object-option-to-create-QOM-objects-from-the-.patch [bz#786407]
  - kvm-rng-add-RndBackend-abstract-object-class.patch [bz#786407]
  - kvm-rng-random-add-an-RNG-backend-that-uses-dev-random-v.patch [bz#786407]
  - kvm-rng-egd-introduce-EGD-compliant-RNG-backend.patch [bz#786407]
  - kvm-rng-egd-don-t-use-gslist_free_full.patch [bz#786407]
  - kvm-virtio-rng-hardware-random-number-generator-device.patch [bz#786407]
  - kvm-virtio-rng-add-rate-limiting-support.patch [bz#786407]
  - kvm-virtio-rng-pci-create-a-default-backend-if-none-exis.patch [bz#786407]
  - kvm-virtio-rng-remove-extra-request-for-entropy.patch [bz#786407]
  - kvm-virtio-use-unsigned-int-for-counting-bytes-in-vq.patch [bz#786407]
  - kvm-virtio-Introduce-virtqueue_get_avail_bytes.patch [bz#786407]
  - kvm-virtio-rng-use-virtqueue_get_avail_bytes-fix-migrati.patch [bz#786407]
  - kvm-virtio-limit-avail-bytes-lookahead.patch [bz#786407]
  - kvm-virtio-rng-disable-timer-on-device-removal.patch [bz#786407]
  - kvm-virtio-rng-fix-typos-comments.patch [bz#786407]
  - kvm-introduce-qemu_close.patch [bz#786407]
  - kvm-rng-random-Use-qemu_open-qemu_close.patch [bz#786407]
  - kvm-rng-random-backend-check-for-EAGAIN-errors-on-read.patch [bz#786407]
  - kvm-virtio-virtqueue_get_avail_bytes-fix-desc_pa-when-lo.patch [bz#786407]
  - kvm-qemu-options.hx-Document-missing-drive-options.patch [bz#1024335]
  - kvm-Monitor-Make-mon_set_cpu-public.patch [bz#1026903]
  - kvm-qapi-Convert-human-monitor-command.patch [bz#1026903]
  - kvm-hmp-human-monitor-command-stop-using-the-Memory-char.patch [bz#1026903]
  - kvm-chardev-drop-the-Memory-chardev-driver.patch [bz#1026903]
  - kvm-chardev-remove-the-headers-of-Memory-chardev-driver.patch [bz#1026903]
  - kvm-pc-drop-unused-compat-property-for-the-virtio-balloo.patch [bz#1027561]
  - kvm-blockdev-Clean-up-how-readonly-persists-across-virtu.patch [bz#1025235]
  - kvm-virtio-rng-add-check-of-period.patch [bz#786407]
  - kvm-rng-egd-remove-redundant-free.patch [bz#786407]
  - kvm-rng-egd-offset-the-point-when-repeatedly-read-from-t.patch [bz#786407]
  - kvm-Improve-reporting-of-fatal-errors.patch [bz#1054137]
  - kvm-vmdk-Allow-read-only-open-of-VMDK-version-3.patch [bz#1007708 bz#1029852]
  - Resolves: bz#1007708
    ([RFE] Enable qemu-img to support VMDK version 3)
  - Resolves: bz#1024335
    (Manpage doesn't document -drive rerror/werror/readonly)
  - Resolves: bz#1025235
    (the readonly permission of floppy will be changed after eject/change)
  - Resolves: bz#1026903
    (QMP: human-monitor-command: fix buffer duplication)
  - Resolves: bz#1027561
    (Cleanup unused event_idx compat property from rhel6.0.0 and rhel6.1.0 machine types)
  - Resolves: bz#1029852
    (qemu-img fails to convert vmdk image with "qemu-img: Could not open 'image.vmdk'")
  - Resolves: bz#1054137
    (improve error reporting)
  - Resolves: bz#786407
    ([RFE] Add ability to pull system entropy from host)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.421.el6
changelog:
  - kvm-monitor-Cleanup-mon-outbuf-on-write-error.patch [bz#1060024]
  - Resolves: bz#1060024
    (QMP socket breaks on unexpected close)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.422.el6
changelog:
  - kvm-block-Pass-filename-to-bdrv_get_full_backing_filenam.patch [bz#1067576]
  - Resolves: bz#1067576
    (RHEV: Cannot start VMs that have more than 23 snapshots.)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.423.el6
changelog:
  - kvm-ACPI-level-VCPU-enablement-info-for-libvirt-RHEL-6-o.patch [bz#1017858]
  - kvm-sasl-Avoid-Could-not-find-keytab-file-in-syslog.patch [bz#1018434]
  - Resolves: bz#1017858
    ([Intel 6.6 Bug] virsh setvcpus can not setup correct vcpu number)
  - Resolves: bz#1018434
    (qemu-kvm: Could not find keytab file: /etc/qemu/krb5.tab: No such file or directory)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.424.el6
changelog:
  - kvm-virtio-net-fix-guest-triggerable-buffer-overrun.patch [bz#1078605]
  - kvm-qcow2-Check-backing_file_offset-CVE-2014-0144.patch [bz#1079453]
  - kvm-qcow2-Check-refcount-table-size-CVE-2014-0144.patch [bz#1079453]
  - kvm-qcow2-Validate-refcount-table-offset.patch [bz#1079518]
  - kvm-qcow2-Validate-snapshot-table-offset-size-CVE-2014-0.patch [bz#1079453]
  - kvm-qcow2-Validate-active-L1-table-offset-and-size-CVE-2.patch [bz#1079453]
  - kvm-qcow2-Fix-backing-file-name-length-check.patch [bz#1079518]
  - kvm-qcow2-Don-t-rely-on-free_cluster_index-in-alloc_refc.patch [bz#1079338]
  - kvm-qcow2-Avoid-integer-overflow-in-get_refcount-CVE-201.patch [bz#1079319]
  - kvm-qcow2-Check-new-refcount-table-size-on-growth.patch [bz#1079518]
  - kvm-qcow2-Fix-types-in-qcow2_alloc_clusters-and-alloc_cl.patch [bz#1079518]
  - kvm-qcow2-Protect-against-some-integer-overflows-in-bdrv.patch [bz#1079518]
  - kvm-qcow2-Catch-some-L1-table-index-overflows.patch [bz#1079518]
  - kvm-qcow2-Fix-new-L1-table-size-check-CVE-2014-0143.patch [bz#1079319]
  - kvm-qcow2-Fix-NULL-dereference-in-qcow2_open-error-path-.patch [bz#1079331]
  - kvm-qcow2-Limit-snapshot-table-size.patch [bz#1079518]
  - kvm-block-cloop-validate-block_size-header-field-CVE-201.patch [bz#1079453]
  - kvm-block-cloop-prevent-offsets_size-integer-overflow-CV.patch [bz#1079319]
  - kvm-block-cloop-refuse-images-with-huge-offsets-arrays-C.patch [bz#1079453]
  - kvm-block-cloop-Fix-coding-style.patch [bz#1079518]
  - kvm-cloop-Fix-bdrv_open-error-handling.patch [bz#1079518]
  - kvm-block-cloop-refuse-images-with-bogus-offsets-CVE-201.patch [bz#1079453]
  - kvm-block-cloop-Use-g_free-instead-of-free.patch [bz#1079518]
  - kvm-block-cloop-fix-offsets-size-off-by-one.patch [bz#1079518]
  - kvm-bochs-Fix-bdrv_open-error-handling.patch [bz#1079518]
  - kvm-bochs-Unify-header-structs-and-make-them-QEMU_PACKED.patch [bz#1079518]
  - kvm-bochs-Use-unsigned-variables-for-offsets-and-sizes-C.patch [bz#1079338]
  - kvm-bochs-Check-catalog_size-header-field-CVE-2014-0143.patch [bz#1079319]
  - kvm-bochs-Check-extent_size-header-field-CVE-2014-0142.patch [bz#1079314]
  - kvm-bochs-Fix-bitmap-offset-calculation.patch [bz#1079518]
  - kvm-vpc-vhd-add-bounds-check-for-max_table_entries-and-b.patch [bz#1079453]
  - kvm-vpc-Validate-block-size-CVE-2014-0142.patch [bz#1079314]
  - kvm-vdi-add-bounds-checks-for-blocks_in_image-and-disk_s.patch [bz#1079453]
  - kvm-vhdx-Bounds-checking-for-block_size-and-logical_sect.patch [bz#1079344]
  - kvm-curl-check-data-size-before-memcpy-to-local-buffer.-.patch [bz#1079453]
  - kvm-dmg-Fix-bdrv_open-error-handling.patch [bz#1079518]
  - kvm-dmg-coding-style-and-indentation-cleanup.patch [bz#1079518]
  - kvm-dmg-prevent-out-of-bounds-array-access-on-terminator.patch [bz#1079518]
  - kvm-dmg-drop-broken-bdrv_pread-loop.patch [bz#1079518]
  - kvm-dmg-use-appropriate-types-when-reading-chunks.patch [bz#1079518]
  - kvm-dmg-sanitize-chunk-length-and-sectorcount-CVE-2014-0.patch [bz#1079324]
  - kvm-dmg-use-uint64_t-consistently-for-sectors-and-length.patch [bz#1079518]
  - kvm-dmg-prevent-chunk-buffer-overflow-CVE-2014-0145.patch [bz#1079324]
  - kvm-block-Limit-request-size-CVE-2014-0143.patch [bz#1079319]
  - kvm-parallels-Fix-catalog-size-integer-overflow-CVE-2014.patch [bz#1079319]
  - kvm-parallels-Sanity-check-for-s-tracks-CVE-2014-0142.patch [bz#1079314]
  - kvm-bochs-Fix-memory-leak-in-bochs_open-error-path.patch [bz#1079518]
  - kvm-bochs-Fix-catalog-size-check.patch [bz#1079518]
  - Resolves: bz#1078605
    (EMBARGOED CVE-2014-0150 qemu: virtio-net: fix guest-triggerable buffer overrun [rhel-6.6])
  - Resolves: bz#1079314
    (CVE-2014-0142 qemu-kvm: qemu: crash by possible division by zero [rhel-6.6])
  - Resolves: bz#1079319
    (CVE-2014-0143 qemu-kvm: Qemu: block: multiple integer overflow flaws [rhel-6.6])
  - Resolves: bz#1079324
    (CVE-2014-0145 qemu-kvm: Qemu: prevent possible buffer overflows [rhel-6.6])
  - Resolves: bz#1079331
    (CVE-2014-0146 qemu-kvm: Qemu: qcow2: NULL dereference in qcow2_open() error path [rhel-6.6])
  - Resolves: bz#1079338
    (CVE-2014-0147 qemu-kvm: Qemu: block: possible crash due signed types or logic error [rhel-6.6])
  - Resolves: bz#1079344
    ()
  - Resolves: bz#1079453
    (CVE-2014-0144 qemu-kvm: Qemu: block: missing input validation [rhel-6.6])
  - Resolves: bz#1079518
    (qemu-kvm: include leftover patches from block layer security audit)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.425.el6
changelog:
  - kvm-blkdebug-pass-getlength-to-underlying-file.patch [bz#1023874 bz#1031883]
  - kvm-qapi-generate-list-struct-and-visit_list-for-enum.patch [bz#1035162]
  - kvm-qapi-Fix-potential-NULL-pointer-segfault.patch [bz#1035162]
  - kvm-dump-change-cpu_get_note_size-to-return-ssize_t.patch [bz#1035162]
  - kvm-dump-guest-memory-Check-for-the-correct-return-value.patch [bz#1035162]
  - kvm-dump-const-qualify-the-buf-of-WriteCoreDumpFunction.patch [bz#1035162]
  - kvm-dump-add-argument-to-write_elfxx_notes.patch [bz#1035162]
  - kvm-dump-add-API-to-write-header-of-flatten-format.patch [bz#1035162]
  - kvm-dump-add-API-to-write-vmcore.patch [bz#1035162]
  - kvm-dump-add-API-to-write-elf-notes-to-buffer.patch [bz#1035162]
  - kvm-dump-add-support-for-lzo-snappy.patch [bz#1035162]
  - kvm-RPM-spec-build-qemu-kvm-with-lzo-and-snappy-enabled-.patch [bz#1035162]
  - kvm-dump-add-members-to-DumpState-and-init-some-of-them.patch [bz#1035162]
  - kvm-dump-add-API-to-write-dump-header.patch [bz#1035162]
  - kvm-dump-add-API-to-write-dump_bitmap.patch [bz#1035162]
  - kvm-dump-add-APIs-to-operate-DataCache.patch [bz#1035162]
  - kvm-dump-add-API-to-write-dump-pages.patch [bz#1035162]
  - kvm-dump-make-kdump-compressed-format-available-for-dump.patch [bz#1035162]
  - kvm-Define-the-architecture-for-compressed-dump-format.patch [bz#1035162]
  - kvm-dump-add-query-dump-guest-memory-capability-command.patch [bz#1035162]
  - kvm-x86-fix-migration-from-pre-version-12.patch [bz#1023268]
  - kvm-x86-cpuid-reconstruct-leaf-0Dh-data.patch [bz#1023268]
  - kvm-net-Update-netdev-peer-on-link-change.patch [bz#965396]
  - kvm-qga-Don-t-require-time-argument-in-guest-set-time-co.patch [bz#1066191]
  - kvm-only-unset-set-mask-notifier-when-kvm-irqchip-is-sup.patch [bz#1074762]
  - kvm-qdev-Allow-vlan-or-netdev-for-device-not-both.patch [bz#998865]
  - kvm-spice-add-SASL-support.patch [bz#1021575]
  - kvm-block-fix-snapshot-on-QED.patch [bz#1012244]
  - kvm-gluster-default-scheme-to-gluster-and-host-to-localh.patch [bz#1088610]
  - kvm-ide-Correct-improper-smart-self-test-counter-reset-i.patch [bz#1087979]
  - Resolves: bz#1012244
    (make live snapshot with QED disk specified qcow2 format will cause guest hang and host call trace)
  - Resolves: bz#1021575
    (Missing SASL support for SPICE)
  - Resolves: bz#1023268
    (Error Code: 0x0000000A at first reboot after fresh installing Win8.1-32 guest on AMD system)
  - Resolves: bz#1023874
    ([Regression] Prompt error of trigger blkdebug: BLKDBG_CLUSTER_FREE event is not the same as expected)
  - Resolves: bz#1031883
    (qemu-io error prompt "Operation is supported" is not expected)
  - Resolves: bz#1035162
    ([FEAT RHEL6.6]: qemu: Support compression for dump-guest-memory command)
  - Resolves: bz#1066191
    (RHEL6: backport guest-set-time command to qemu-guest-agent)
  - Resolves: bz#1074762
    (qemu-kvm  Segmentation fault when using -no-kvm-irqchip option and virtio-nic-pci device as the same time)
  - Resolves: bz#1087979
    (CVE-2014-2894 qemu-kvm: QEMU: out of bounds buffer accesses, guest triggerable via IDE SMART [rhel-6.6])
  - Resolves: bz#1088610
    (qemu-img coredumpd when try to create a gluster format image)
  - Resolves: bz#965396
    (turn down tap link off under hmp, rhel6.4 guest boot stalled  at "starting certmonger" after “system-reset”)
  - Resolves: bz#998865
    (Add vlan parameter in device_add command would cause device_add qemu_new_net_client: Assertion `!peer')


author: Jeff E. Nelson <jenelson@redhat.com> - 0.12.1.2-2.426.el6
changelog:
  - kvm-Python-lang-gdb-script-to-extract-x86_64-guest-vmcor.patch [bz#826266]
  - kvm-dump-guest-memory.py-port-guest_phys_blocks_append-t.patch [bz#826266]
  - kvm-dump-guest-memory.py-ram_blocks-is-a-QLIST-not-a-QTA.patch [bz#826266]
  - kvm-dump-guest-memory.py-convert-PhysPageDesc.phys_offse.patch [bz#826266]
  - kvm-dump-guest-memory.py-hoist-gdb-round-trip-from-inner.patch [bz#826266]
  - kvm-dump-guest-memory.py-trim-logs-in-memory-listener-ca.patch [bz#826266]
  - kvm-RPM-spec-install-dump-guest-memory.py-RHEL-only.patch [bz#826266]
  - kvm-enable-PCI-multiple-segments-for-pass-through-device.patch [bz#1081451]
  - kvm-spice-fix-info-spice.patch [bz#1029983]
  - kvm-virtio-out-of-bounds-buffer-write-on-invalid-state-l.patch [bz#1096089]
  - kvm-usb-sanity-check-setup_index-setup_len-in-post_load.patch [bz#1096117]
  - kvm-usb-sanity-check-setup_index-setup_len-in-post_02.patch [bz#1096117]
  - kvm-virtio-scsi-fix-buffer-overrun-on-invalid-state-load.patch [bz#1096097]
  - kvm-virtio-avoid-buffer-overrun-on-incoming-migration.patch [bz#1096093]
  - kvm-posix-aio-compat-fix-latency-issues.patch [bz#1097031]
  - kvm-virtio-validate-num_sg-when-mapping.patch [bz#1096124]
  - kvm-virtio-allow-mapping-up-to-max-queue-size.patch [bz#1096093 bz#1096124]
  - kvm-virtio-net-fix-buffer-overflow-on-invalid-state-load.patch [bz#1066430]
  - kvm-virtio-validate-config_len-on-load.patch [bz#1095780]
  - kvm-usb-fix-up-post-load-checks.patch [bz#1096826]
  - Resolves: bz#1029983
    (spice-server reports incorrect listening address on monitor with "ipv6" option)
  - Resolves: bz#1066430
    (CVE-2013-4148 qemu: virtio-net: buffer overflow on invalid state load [rhel-6.6])
  - Resolves: bz#1081451
    (qemu-kvm-rhev does not support Non Zero PCI domain for SRIOV Virtual Functions)
  - Resolves: bz#1095780
    (CVE-2014-0182 qemu-kvm: qemu: virtio: out-of-bounds buffer write on state load with invalid config_len [rhel-6.6])
  - Resolves: bz#1096089
    (CVE-2013-4151 qemu-kvm: qemu: virtio: out-of-bounds buffer write on invalid state load [rhel-6.6])
  - Resolves: bz#1096093
    (CVE-2013-6399 qemu-kvm: qemu: virtio: buffer overrun on incoming migration [rhel-6.6])
  - Resolves: bz#1096097
    (CVE-2013-4542 qemu-kvm: qemu: virtio-scsi: buffer overrun on invalid state load [rhel-6.6])
  - Resolves: bz#1096117
    (CVE-2013-4541 qemu-kvm: qemu: usb: insufficient sanity checking of setup_index+setup_len in post_load [rhel-6.6])
  - Resolves: bz#1096124
    (CVE-2013-4535 CVE-2013-4536 qemu-kvm: qemu: virtio: insufficient validation of num_sg when mapping [rhel-6.6])
  - Resolves: bz#1096826
    (CVE-2014-3461 qemu-kvm: Qemu: usb: fix up post load checks [rhel-6.6])
  - Resolves: bz#1097031
    (Improve posix-aio-compat latency by backporting upstream fix)
  - Resolves: bz#826266
    ([Hitachi 6.6 FEAT] Extract guest memory dump from qemu-kvm core)


author: Jeff E. Nelson <jenelson@redhat.com> - 0.12.1.2-2.427.el6
changelog:
  - kvm-Introduce-range.h.patch [bz#1004420]
  - kvm-qcow2-fix-typo-in-documentation-for-qcow2_get_cluste.patch [bz#1004420]
  - kvm-qcow2-Ignore-reserved-bits-in-get_cluster_offset.patch [bz#1004420]
  - kvm-qcow2-Ignore-reserved-bits-in-refcount-table-entries.patch [bz#1004420]
  - kvm-qcow2-handle_alloc-Get-rid-of-keep_clusters-paramete.patch [bz#1004420]
  - kvm-qcow2-Finalise-interface-of-handle_alloc.patch [bz#1004420]
  - kvm-qcow2-Metadata-overlap-checks.patch [bz#1004420]
  - kvm-qcow2-Employ-metadata-overlap-checks.patch [bz#1004420]
  - kvm-qcow2-refcount-Move-OFLAG_COPIED-checks.patch [bz#1004420]
  - kvm-qcow2-refcount-Repair-OFLAG_COPIED-errors.patch [bz#1004420]
  - kvm-qcow2-refcount-Repair-shared-refcount-blocks.patch [bz#1004420]
  - kvm-qmp-Documentation-for-BLOCK_IMAGE_CORRUPTED.patch [bz#1004420]
  - kvm-qcow2-Correct-snapshots-size-for-overlap-check.patch [bz#1004420]
  - kvm-qcow2-Correct-endianness-in-overlap-check.patch [bz#1004420]
  - kvm-qcow2-Switch-L1-table-in-a-single-sequence.patch [bz#1004420]
  - kvm-qcow2-Use-pread-for-inactive-L1-in-overlap-check.patch [bz#1004420]
  - kvm-qcow2-Remove-wrong-metadata-overlap-check.patch [bz#1004420]
  - kvm-qcow2-Use-negated-overflow-check-mask.patch [bz#1004420]
  - kvm-qcow2-Make-overlap-check-mask-variable.patch [bz#1004420]
  - kvm-qcow2-Add-more-overlap-check-bitmask-macros.patch [bz#1004420]
  - kvm-qcow2-fix-wrong-value-of-L1E_OFFSET_MASK-L2E_OFFSET_.patch [bz#1004420]
  - kvm-qcow2-refcount-Sanitize-refcount-table-entry.patch [bz#1004420]
  - kvm-qcow2-Correct-comment-for-realloc_refcount_block.patch [bz#1004420]
  - kvm-qcow2-Fix-fail-path-in-realloc_refcount_block.patch [bz#1004420]
  - kvm-CPU-hotplug-use-apic_id_for_cpu-round-2-RHEL-6-only.patch [bz#1099599]
  - kvm-device-assignment-don-t-update-msix-if-vector-s-unch.patch [bz#1096984]
  - Resolves: bz#1004420
    (Backport qcow2 corruption prevention patches)
  - Resolves: bz#1096984
    ([Intel 6.6 Bug] 2x RHEL 5.10 VM running on RHEL 6.5 KVM have low TCP_STREAM throughput)
  - Resolves: bz#1099599
    (Some vCPU topologies not accepted by libvirt)


author: Jeff E. Nelson <jenelson@redhat.com> - 0.12.1.2-2.428.el6
changelog:
  - kvm-qcow2-preserve-free_byte_offset-when-qcow2_alloc_byt.patch [bz#1101701]
  - kvm-block-Fix-bdrv_is_allocated-for-short-backing-files.patch [bz#1092117]
  - kvm-PCI-Convert-pci_info-to-QObject.patch [bz#813748]
  - kvm-PCI-do_pci_info-PCI-bridge-devices-support.patch [bz#813748]
  - kvm-PCI-show-also-host-bridge-data-in-info-pci-output.patch [bz#813748]
  - kvm-pci-fix-info-pci-with-host-bridge.patch [bz#813748]
  - kvm-qapi-Convert-query-pci.patch [bz#813748]
  - kvm-qdev-DEVICE_DELETED-event.patch [bz#813748]
  - kvm-hmp-Fix-freeing-of-PciInfoList.patch [bz#813748]
  - Resolves: bz#1092117
    (live incremental migration of vm with common shared base, size(disk) > size(base) transfers unallocated sectors, explodes disk on dest)
  - Resolves: bz#1101701
    (comparison always false at qcow2_refcount.c:613)
  - Resolves: bz#813748
    ([RFE] Report whether hot unplug completed)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.429.el6
changelog:
  - kvm-hw-qxl-support-client-monitor-configuration-via-devi.patch [bz#1075139]
  - kvm-usb-move-usb_-hi-lo-helpers-to-header-file.patch [bz#949547]
  - kvm-usb-add-vendor-request-defines.patch [bz#949547]
  - kvm-Add-rhel6.6.0-machine-type.patch [bz#949547]
  - kvm-add-msos-desc-compat-prop.patch [bz#949547]
  - kvm-usb-add-support-for-microsoft-os-descriptors.patch [bz#949547]
  - kvm-usb-hid-add-microsoft-os-descriptor-support.patch [bz#949547]
  - kvm-block-vhdx-account-for-identical-header-sections.patch [bz#1097021]
  - kvm-block-Ignore-duplicate-or-NULL-format_name-in-bdrv_i.patch [bz#998426]
  - kvm-qcow-Return-real-error-code-in-qcow_open.patch [bz#1097228]
  - kvm-qcow1-Make-padding-in-the-header-explicit.patch [bz#1097228]
  - kvm-qcow1-Check-maximum-cluster-size.patch [bz#1097228]
  - kvm-qcow1-Validate-L2-table-size-CVE-2014-0222.patch [bz#1097228]
  - kvm-qcow1-Validate-image-size-CVE-2014-0223.patch [bz#1097235]
  - kvm-qcow1-Stricter-backing-file-length-check.patch [bz#1097235]
  - kvm-virtio-scsi-add-ioeventfd-support.patch [bz#1106420]
  - kvm-Fix-pkgversion-value.patch [bz#1074396]
  - kvm-vl.c-Output-error-on-invalid-machine-type.patch [bz#990254]
  - kvm-block-fix-signed-int-overflow-in-qcow2_co_get_block_.patch [bz#1101430]
  - kvm-qemu-img-add-special-exit-code-if-bdrv_check-is-not-.patch [bz#1054753]
  - kvm-qemu-img-Report-error-even-with-oformat-json.patch [bz#1054753]
  - kvm-qemu-img-Document-check-exit-codes.patch [bz#1054753]
  - kvm-blockdev-preserve-readonly-and-snapshot-states-acros.patch [bz#1105428]
  - kvm-target-i386-Broadwell-CPU-model.patch [bz#1100380]
  - kvm-target-i386-support-invariant-tsc-flag.patch [bz#996771]
  - kvm-target-i386-block-migration-and-savevm-if-invariant-.patch [bz#996771]
  - Resolves: bz#1054753
    (qemu-img doesn't print error in json for raw images)
  - Resolves: bz#1074396
    (QMP: "query-version" doesn't include the -rhev prefix from the qemu-kvm-rhev package)
  - Resolves: bz#1075139
    (multi-monitor doesn't work with a RHEL 7 guest.)
  - Resolves: bz#1097021
    ([RFE] qemu-img: Add/improve Disk2VHD tools creating VHDX images)
  - Resolves: bz#1097228
    (CVE-2014-0222 qemu-kvm: Qemu: qcow1: validate L2 table size to avoid integer overflows [rhel-6.6])
  - Resolves: bz#1097235
    (CVE-2014-0223 qemu-kvm: Qemu: qcow1: validate image size to avoid out-of-bounds memory access [rhel-6.6])
  - Resolves: bz#1100380
    ([Intel 6.6 FEAT] Broadwell new instructions support for KVM - qemu-kvm)
  - Resolves: bz#1101430
    (qemu-kvm get "Unknown error 1539571707" when execute block-stream)
  - Resolves: bz#1105428
    (readonly=on has no effect for drive with no media)
  - Resolves: bz#1106420
    (Enable ioenventfd for virtio-scsi-pci)
  - Resolves: bz#949547
    (qemu-kvm process consumes 8% cpu even when windows guest is idle inside and 70% when guest uses 10% cpu inside)
  - Resolves: bz#990254
    (qemu-kvm failing when invalid machine type is provided)
  - Resolves: bz#996771
    (nonstop_tsc cpu flag support for KVM guests - QEMU support)
  - Resolves: bz#998426
    (there are four "gluster" in qemu-img supported format list)


author: Jeff E. Nelson <> - 0.12.1.2-2.430.el6
changelog:
  - kvm-qxl-render-add-sanity-check.txt [bz#1095612]
  - kvm-qxl-always-update-displaysurface-on-resize.txt [bz#1112078]
  - Resolves: bz#1095612
    (Machine type rhel6.0.0 & -vga qxl & vnc cause qemu-kvm core dump)
  - Resolves: bz#1112078
    (RHEL7 guest desktop hang when boot with qxl and vnc)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.431.el6
changelog:
  - kvm-dump-Drop-pointless-error_is_set-DumpState-member-er.patch [bz#1102659]
  - kvm-dump-fill-in-the-flat-header-signature-more-pleasing.patch [bz#1102659]
  - kvm-dump-simplify-write_start_flat_header.patch [bz#1102659]
  - kvm-dump-eliminate-DumpState.page_shift-guest-s-page-shi.patch [bz#1102659]
  - kvm-dump-eliminate-DumpState.page_size-guest-s-page-size.patch [bz#1102659]
  - kvm-dump-select-header-bitness-based-on-ELF-class-not-EL.patch [bz#1102659]
  - kvm-dump-hoist-lzo_init-from-get_len_buf_out-to-dump_ini.patch [bz#1102659]
  - kvm-dump-simplify-get_len_buf_out.patch [bz#1102659]
  - kvm-virtio-rng-check-return-value-of-virtio_load-RHEL-6-.patch [bz#1102668]
  - kvm-block-add-ROUND_UP-into-osdep.h.patch [bz#1063559]
  - kvm-block-vhdx-add-migration-blocker.patch [bz#1063559]
  - kvm-block-vhdx-minor-comments-and-typo-correction.patch [bz#1063559]
  - kvm-block-vhdx-add-header-update-capability.patch [bz#1063559]
  - kvm-block-vhdx-code-movement-VHDXMetadataEntries-and-BDR.patch [bz#1063559]
  - kvm-block-vhdx-log-support-struct-and-defines.patch [bz#1063559]
  - kvm-block-vhdx-break-endian-translation-functions-out.patch [bz#1063559]
  - kvm-block-vhdx-update-log-guid-in-header-and-first-write.patch [bz#1063559]
  - kvm-block-vhdx-code-movement-move-vhdx_close-above-vhdx_.patch [bz#1063559]
  - kvm-block-vhdx-log-parsing-replay-and-flush-support.patch [bz#1063559]
  - kvm-block-vhdx-add-region-overlap-detection-for-image-fi.patch [bz#1063559]
  - kvm-block-vhdx-add-log-write-support.patch [bz#1063559]
  - kvm-block-vhdx-write-support.patch [bz#1063559]
  - kvm-block-vhdx-remove-BAT-file-offset-bit-shifting.patch [bz#1063559]
  - kvm-block-vhdx-move-more-endian-translations-to-vhdx-end.patch [bz#1063559]
  - kvm-block-vhdx-break-out-code-operations-to-functions.patch [bz#1063559]
  - kvm-block-vhdx-fix-comment-typos-in-header-fix-incorrect.patch [bz#1063559]
  - kvm-block-vhdx-add-.bdrv_create-support.patch [bz#1063559]
  - kvm-vpc-Implement-.bdrv_has_zero_init.patch [bz#1063559]
  - kvm-block-vpc-use-QEMU_PACKED-for-on-disk-structures.patch [bz#1063559]
  - kvm-vpc-vhdx-add-get_info.patch [bz#1063559]
  - kvm-block-vhdx-improve-error-message-and-.bdrv_check-imp.patch [bz#1063559]
  - kvm-block-vhdx-Error-checking-fixes.patch [bz#1063559]
  - kvm-spec-explicitly-enable-vhdx-in-build.patch [bz#1063559]
  - kvm-Fix-multiboot-compilation.patch [bz#820641]
  - kvm-docs-update-qemu-img-man-page-to-reflect-vhdx-image-.patch [bz#1017649]
  - kvm-tracetool-add-tracetool-simpletrace_stap-format.patch [bz#905761]
  - kvm-trace-install-simpletrace-SystemTap-tapset.patch [bz#905761]
  - kvm-trace-install-trace-events.patch [bz#905761]
  - kvm-simpletrace-add-simpletrace.py-script.patch [bz#905761]
  - kvm-simpletrace-add-simpletrace.py-no-header-option.patch [bz#905761]
  - kvm-simpletrace-install-simpletrace.py.patch [bz#905761]
  - kvm-trace-add-SystemTap-init-scripts-for-simpletrace-bri.patch [bz#905761]
  - kvm-block-Create-proper-size-file-for-disk-mirror.patch [bz#1092117]
  - kvm-block-Fix-bdrv_is_allocated-return-value.patch [bz#1092117]
  - Resolves: bz#1017649
    (need to update qmeu-img man help docs page about "VHDX" format disk)
  - Resolves: bz#1063559
    (VHDX: journal log should not be replayed by default, but rather via qemu-img check -r all)
  - Resolves: bz#1092117
    (live incremental migration of vm with common shared base, size(disk) > size(base) transfers unallocated sectors, explodes disk on dest)
  - Resolves: bz#1102659
    (Use-after-free of file descriptor in create_kdump_vmcore)
  - Resolves: bz#1102668
    (Return value of virtio_load not checked in virtio_rng_load)
  - Resolves: bz#820641
    (Unable to run kvm unit tests with -append option)
  - Resolves: bz#905761
    ([Fujitsu 6.6 FEAT]: QEMU: enable easy introspection of the list of trace events and their arguments)


author: Jeff E. Nelson <jenelson@redhat.com> - 0.12.1.2-2.432.el6
changelog:
  - kvm-vmdk-refuse-enabling-zeroed-grain-with-flat-images.txt [bz#1088788]
  - kvm-vmdk-Only-read-cid-from-image-file-when-opening.txt [bz#1088788]
  - kvm-vmdk-Fix-creating-big-description-file.txt [bz#1088788]
  - kvm-vmdk-Check-VMFS-extent-line-field-number.txt [bz#1088788]
  - kvm-vmdk-Fix-big-flat-extent-IO.txt [bz#1088788]
  - kvm-scsi-disk-rd-wr-vr-protect-0-is-an-error.txt [bz#1064643]
  - kvm-scsi-disk-improve-the-lba-out-of-range-tests-for-read-.txt [bz#1064643]
  - kvm-scsi-disk-Fail-medium-writes-with-proper-sense-for-rea.txt [bz#1064643]
  - kvm-scsi-disk-improve-out-of-range-LBA-detection-for-WRITE.txt [bz#1064643]
  - kvm-scsi-disk-introduce-check_lba_range.txt [bz#1064643]
  - kvm-scsi-disk-fix-check-for-out-of-range-LBA.txt [bz#1064643]
  - kvm-virtio-blk-Fix-commit-f0f6bce-fail-unaligned-requests.txt [bz#1064643]
  - kvm-virtio-blk-Factor-common-checks-out-of-virtio_blk_hand.txt [bz#1064643]
  - kvm-virtio-blk-Bypass-error-action-and-I-O-accounting-on-i.txt [bz#1064643]
  - kvm-virtio-blk-Treat-read-write-beyond-end-as-invalid.txt [bz#1064643]
  - kvm-ide-Treat-read-write-beyond-end-as-invalid.txt [bz#1064643]
  - kvm-scsi-Report-error-when-lun-number-is-in-use.txt [bz#1095609]
  - Resolves: bz#1064643
    (qemu makes no distinction between external and guest triggered block I/O errors)
  - Resolves: bz#1088788
    (qemu-img creates truncated VMDK image with subformat=twoGbMaxExtentFlat)
  - Resolves: bz#1095609
    (qemu-kvm should give some hint when hot-plug a devices with the same existing "scsi-id  and lun")


author: Jeff E. Nelson <jenelson@redhat.com> - 0.12.1.2-2.433.el6
changelog:
  - kvm-qxl-dont-update-invalid-area.txt [bz#994388]
  - kvm-qxl-update_area_io-cleanup-invalid-parameters-handling.txt [bz#994388]
  - kvm-target-i386-remove-tabs-from-target-i386-cpu.h.txt [bz#845667]
  - kvm-migrate-vPMU-state.txt [bz#845667]
  - kvm-vPMU-do-not-migrate-for-M-rhel6.5.0-or-older.txt [bz#845667]
  - kvm-virtio-scsi-Fix-reset-callback-for-virtio-scsi.txt [bz#1123698]
  - kvm-scsi-bus-prepare-scsi_req_new-for-introduction-of-pars.txt [bz#1113917]
  - kvm-scsi-bus-introduce-parse_cdb-in-SCSIDeviceClass-and-SC.txt [bz#1113917]
  - kvm-scsi-block-extract-scsi_block_is_passthrough.txt [bz#1113917]
  - kvm-scsi-block-scsi-generic-implement-parse_cdb.txt [bz#1113917]
  - kvm-virtio-scsi-implement-parse_cdb.txt [bz#1113917]
  - Resolves: bz#1113917
    ([FJ6.5 Bug] SCSI command issued from KVM guest doesn't reach target device)
  - Resolves: bz#1123698
    (qemu-kvm core dump when hot-plug a virtio-scsi disk to guest and reboot)
  - Resolves: bz#845667
    (Virtual PMU support during live migration)
  - Resolves: bz#994388
    (SpiceWorker-CRITICAL **: red_worker.c:4894:red_update_area: condition `area->left >= 0 && area->top >= 0 && area->left < area->right && area->top < area->bottom' failed)


author: Jeff E. Nelson <jenelson@redhat.com> - 0.12.1.2-2.434.el6
changelog:
  - kvm-block-gluster-code-movements-state-storage-changes.txt [bz#1118543]
  - kvm-block-gluster-add-reopen-support.txt [bz#1118543]
  - Resolves: bz#1118543
    (Can not continue live commiting when using glusterfs(native) backend after relaunch qemu)


author: Jeff E. Nelson <> - 0.12.1.2-2.435.el6
changelog:
  - kvm-migration-dump-vmstate-info-as-a-json-file-for-stati.patch [bz#1118718]
  - kvm-vmstate-static-checker-script-to-validate-vmstate-ch.patch [bz#1118718]
  - kvm-tests-vmstate-static-checker-add-dump1-and-dump2-fil.patch [bz#1118718]
  - kvm-tests-vmstate-static-checker-incompat-machine-types.patch [bz#1118718]
  - kvm-tests-vmstate-static-checker-add-version-error-in-ma.patch [bz#1118718]
  - kvm-tests-vmstate-static-checker-version-mismatch-inside.patch [bz#1118718]
  - kvm-tests-vmstate-static-checker-minimum_version_id-chec.patch [bz#1118718]
  - kvm-tests-vmstate-static-checker-remove-a-section.patch [bz#1118718]
  - kvm-tests-vmstate-static-checker-remove-a-field.patch [bz#1118718]
  - kvm-tests-vmstate-static-checker-remove-last-field-in-a-.patch [bz#1118718]
  - kvm-tests-vmstate-static-checker-change-description-name.patch [bz#1118718]
  - kvm-tests-vmstate-static-checker-remove-Fields.patch [bz#1118718]
  - kvm-tests-vmstate-static-checker-remove-Description.patch [bz#1118718]
  - kvm-tests-vmstate-static-checker-remove-Description-insi.patch [bz#1118718]
  - kvm-tests-vmstate-static-checker-remove-a-subsection.patch [bz#1118718]
  - kvm-tests-vmstate-static-checker-remove-Subsections.patch [bz#1118718]
  - kvm-tests-vmstate-static-checker-add-substructure-for-us.patch [bz#1118718]
  - kvm-tests-vmstate-static-checker-add-size-mismatch-insid.patch [bz#1118718]
  - Resolves: bz#1118718
    (VMstate static checker: backport -dump-vmstate feature to export json-encoded vmstate info)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.436.el6
changelog:
  - kvm-qcow2-Reject-too-large-header-extensions.patch [bz#1124443]
  - kvm-block-Fix-is_allocated_above-with-resized-files.patch [bz#1122992]
  - kvm-block-mirror-Use-bdrv_is_allocated_above.patch [bz#1122992]
  - kvm-qemu-io-New-command-map.patch [bz#1122410]
  - kvm-qemu-io-Implement-write-c-for-compressed-clusters.patch [bz#1122410]
  - kvm-qemu-img-Add-compare-subcommand.patch [bz#1122410]
  - kvm-qemu-img-Fix-overwriting-ret-before-using.patch [bz#1122410]
  - kvm-QMP-add-get_events-wait-True-option.patch [bz#1122410]
  - kvm-qmp-Check-for-returned-data-from-__json_read-in-get_.patch [bz#1122410]
  - kvm-QMP-add-server-mode-to-QEMUMonitorProtocol.patch [bz#1122410]
  - kvm-qemu-iotests-Import-from-upstream.patch [bz#1122410]
  - kvm-qemu-iotests-Disable-tests-that-require-sample-image.patch [bz#1122410]
  - kvm-block-parse-cache-mode-flags-in-a-single-place.patch [bz#1122410]
  - kvm-qemu-io-Add-command-line-switch-for-cache-mode.patch [bz#1122410]
  - kvm-qemu-io-correctly-print-non-integer-values-as-decima.patch [bz#1122410]
  - kvm-qemu-iotests-Modify-scripts-to-run-with-qemu-kvm-rhe.patch [bz#1122410]
  - kvm-qemu-iotests-Disable-cases-requiring-not-backported-.patch [bz#1122410]
  - kvm-qemu-iotests-Backport-028.patch [bz#1122410]
  - kvm-qemu-iotests-Backport-029.patch [bz#1122410]
  - kvm-qemu-iotests-Backport-030.patch [bz#1122410]
  - kvm-qemu-iotests-Backport-060.patch [bz#1122410]
  - kvm-qemu-iotests-Backport-031.patch [bz#1122410]
  - kvm-qemu-iotests-Backport-040.patch [bz#1122410]
  - kvm-qemu-iotests-Backport-041.patch [bz#1122410]
  - kvm-qemu-iotests-Backport-049.patch [bz#1122410]
  - kvm-qemu-iotests.-Backport-067.patch [bz#1122410]
  - kvm-qemu-iotests-Backport-080.patch [bz#1122410]
  - kvm-qemu-iotests-Backport-086.patch [bz#1122410]
  - kvm-qemu-iotests-Trivial-test-case-backports.patch [bz#1122410]
  - kvm-virtio-rng-Add-human-readable-error-message-for-nega.patch [bz#1119207]
  - kvm-virtio-rng-Move-error-checking-forward-to-prevent-me.patch [bz#1119207]
  - Resolves: bz#1119207
    ([rng]qemu-kvm process still can start when specify negative value for max-bytes)
  - Resolves: bz#1122410
    (backport qemu-iotests to the RHEL 6 internal repository)
  - Resolves: bz#1122992
    (Full mirroring with smaller backing file causes qemu to hang)
  - Resolves: bz#1124443
    (qcow2 doesn't catch invalid header extension sizes)


author: Jeff E. Nelson <> - 0.12.1.2-2.437.el6
changelog:
  - kvm-vmschk-check-rhel6.py-quickly-compare-RHEL6-jsons-ba.patch [bz#1125792]
  - kvm-tests-add-rhel6.0-to-rhel6.6-vmstate-json-files.patch [bz#1125792]
  - kvm-scsi-Ensure-command-and-transfer-lengths-are-set-for.patch [bz#1113068]
  - kvm-Documentation-qemu-img-Mention-SIGUSR1-progress-repo.patch [bz#1122885]
  - Resolves: bz#1113068
    (Qemu crashes when some commands are passed from guest to host tape device.)
  - Resolves: bz#1122885
    (qemu-img man doc should tell "should report progress bar when receives "SIGUSR1" signal if -p option is not used")
  - Resolves: bz#1125792
    (Add vmstate json representation files for RHEL6 releases to source tree)


author: Jeff E. Nelson <> - 0.12.1.2-2.438.el6
changelog:
  - kvm-hda-audio-fix-non-mixer-codecs.patch [bz#1080546]
  - kvm-spice-stop-server-for-qxl-hard-reset.patch [bz#995931]
  - kvm-spice-move-qemu_spice_display_-from-spice-graphics-t.patch [bz#995931]
  - kvm-spice-move-spice_server_vm_-start-stop-calls-into-qe.patch [bz#995931]
  - Resolves: bz#1080546
    (pulse sound no longer works after changing KVM win 7 guest SID in RHEL 6.5)
  - Resolves: bz#995931
    (Qemu core dump (red_get_image: unknown type 184) when reboot a RHEL.6.4-64 guest 25 times)


author: Jeff E. Nelson <> - 0.12.1.2-2.439.el6
changelog:
  - kvm-spice-fix-libvirt-snapshots.patch [bz#1010670]
  - kvm-ide-Ignore-double-DMA-transfer-starts-stops.patch [bz#1104573]
  - kvm-ide-Reset-current_addr-after-stopping-DMA.patch [bz#1104573]
  - kvm-ide-Reset-BMIDEA-bit-when-the-bus-master-is-stopped.patch [bz#1104573]
  - Resolves: bz#1010670
    (spice session is closed when taking snapshot with ram)
  - Resolves: bz#1104573
    (DMA error when install RHEL.5.11.x86_64 guest (ide drive) on RHEL6.5.z host)


author: Jeff E. Nelson <> - 0.12.1.2-2.440.el6
changelog:
  - kvm-hw-qdev-emit-DEVICE_DELETED-event-only-if-the-device.patch [bz#1124314]
  - kvm-ide-Fix-segfault-when-flushing-a-device-that-doesn-t.patch [bz#1120541]
  - Resolves: bz#1120541
    (qemu-kvm crashed when doing iofuzz testing)
  - Resolves: bz#1124314
    (incorrect event reported by QMP on hot plugging an in-use VF to guest)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.441.el6
changelog:
  - kvm-block-Improve-bdrv_aio_co_cancel_em.patch [bz#1018537]
  - kvm-usb-Avoid-reentrancy-of-ehci_advance_async_state-dow.patch [bz#1018537]
  - kvm-scripts-add-sample-model-file-for-Coverity-Scan.patch [bz#1102409]
  - Resolves: bz#1018537
    (qemu core dump after run read/randwr fio in guest with usb or scsi disk)
  - Resolves: bz#1102409
    (Unable to handle NULL pointer dereference in qcow2_check_refcounts)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.442.el6
changelog:
  - kvm-Fix-TEXI-section-mark-imbalance-in-qemu-img-cmd.hx.patch [bz#1116558]
  - kvm-qemu-img-Allow-source-cache-mode-specification.patch [bz#1116558]
  - kvm-vl-Change-mem-prealloc-to-match-upstream.patch [bz#1006027]
  - Resolves: bz#1006027
    (-mem-prealloc option behaviour is opposite to expected)
  - Resolves: bz#1116558
    (Allow qemu-img to bypass the host cache (check, compare, convert, rebase, amend))


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.443.el6
changelog:
  - kvm-char-add-a-dummy-fe_open-implementation.patch [bz#1027181]
  - kvm-char-restore-read-callback-on-a-reattached-hotplug-c.patch [bz#1027181]
  - Resolves: bz#1027181
    (Guest can't receive any character transmitted from host after hot unplugging virtserialport then hot plugging again)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.443.el6
changelog:
  - kvm-qxl-render-add-more-sanity-checks.patch [bz#1095612]
  - Resolves: bz#1095612
    (Machine type rhel6.0.0 & -vga qxl & vnc cause qemu-kvm core dump)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.445.el6
changelog:
  - kvm-trace-add-systemtap-initscript-README-file-to-RPM.patch [bz#1139438]
  - Resolves: bz#1139438
    (README for qemu-kvm systemtap flight recorder)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.446.el6
changelog:
  - Properly adding missing README.systemtap [bz#1139438]
  - Resolves: bz#1139438
    (README for qemu-kvm systemtap flight recorder)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.447.el6
changelog:
  - kvm-net-Forbid-dealing-with-packets-when-VM-is-not-runni.patch [bz#1142756 bz#970103]
  - kvm-migration-set-speed-to-maximum-during-last-stage.patch [bz#1142756 bz#970103]
  - kvm-migration-only-call-append-when-there-is-something-t.patch [bz#1142756 bz#970103]
  - kvm-migration-avoid-no-op-memmove-of-potential-large-buf.patch [bz#1142756 bz#970103]
  - kvm-migration-remove-not-needed-ram_save_remaining-funct.patch [bz#1142756 bz#970103]
  - kvm-migration-move-bandwidth-calculation-to-inside-stage.patch [bz#1142756 bz#970103]
  - kvm-migration-Don-t-calculate-bandwidth-when-last-cycle-.patch [bz#1142756 bz#970103]
  - Resolves: bz#1142756
    (Downtime during live migration of busy VM is much higher than migration_downtime in vdsm.conf)
  - Resolves: bz#970103
    (Downtime during live migration of busy VM is much higher than migration_downtime in vdsm.conf)
  - Properly include README.systemtap [bz#1145672]
  - Resolves: bz#1145672
    (README for qemu-kvm systemtap flight recorder)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.448.el6
changelog:
  - kvm-Revert-migration-Don-t-calculate-bandwidth-when-last.patch [bz#970103]
  - kvm-Revert-migration-move-bandwidth-calculation-to-insid.patch [bz#970103]
  - kvm-Revert-migration-remove-not-needed-ram_save_remainin.patch [bz#970103]
  - kvm-Revert-migration-avoid-no-op-memmove-of-potential-la.patch [bz#970103]
  - kvm-Revert-migration-only-call-append-when-there-is-some.patch [bz#970103]
  - kvm-Revert-migration-set-speed-to-maximum-during-last-st.patch [bz#970103]
  - kvm-Revert-net-Forbid-dealing-with-packets-when-VM-is-no.patch [bz#970103]
  - Reverts attempt to solve: bz#970103
    (Downtime during live migration of busy VM is much higher than migration_downtime in vdsm.conf)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.449.el6
changelog:
  - kvm-ide-Add-wwn-support-to-IDE-ATAPI-drive.patch [bz#1130475]
  - kvm-trace-add-qemu_system_powerdown_request-and-qemu_sys.patch [bz#1149120]
  - kvm-slirp-udp-fix-NULL-pointer-dereference-because-of-un.patch [bz#1144819]
  - kvm-scsi-disk-Improve-error-messager-if-can-t-get-versio.patch [bz#1021785]
  - kvm-scsi-Improve-error-messages-more.patch [bz#1021785]
  - kvm-migration-fix-parameter-validation-on-ram-load-CVE-2.patch [bz#1163077]
  - Resolves: bz#1021785
    (the error message "scsi generic interface too old" is wrong more often than not)
  - Resolves: bz#1130475
    (fail to specify wwn for virtual IDE CD-ROM)
  - Resolves: bz#1144819
    (CVE-2014-3640 qemu-kvm: qemu: slirp: NULL pointer deref in sosendto() [rhel-6.7])
  - Resolves: bz#1149120
    ([Fujitsu 6.7 FEAT]: QEMU: Add tracepoints in system shutdown)
  - Resolves: bz#1163077
    (CVE-2014-7840 qemu-kvm: qemu: insufficient parameter validation during ram load [rhel-6.7])


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.450.el6
changelog:
  - kvm-qom-Fix-class-cast-of-NULL-classes.patch [bz#1102730]
  - Resolves: bz#1102730
    (Unnecessary or missing NULL checks in object_class_dynamic_cast_assert)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.451.el6
changelog:
  - kvm-net-Forbid-dealing-with-packets-when-VM-is-not-runni-v2.patch [bz#970103]
  - kvm-virtio-net-drop-assert-on-vm-stop.patch [bz#970103]
  - kvm-migration-set-speed-to-maximum-during-last-stage-v2.patch [bz#970103]
  - kvm-migration-only-call-append-when-there-is-something-t-v2.patch [bz#970103]
  - kvm-migration-Only-call-memmove-when-there-is-anything-t.patch [bz#970103]
  - kvm-migration-remove-not-needed-ram_save_remaining-funct-v2.patch [bz#970103]
  - kvm-migration-move-bandwidth-calculation-to-inside-stage-v2.patch [bz#970103]
  - kvm-migration-Don-t-calculate-bandwidth-when-last-cycle-v2.patch [bz#970103]
  - kvm-buffered_flush-return-errors.patch [bz#970103]
  - kvm-bandwidth_limit-standarize-in-size_t.patch [bz#970103]
  - Resolves: bz#970103
    (Downtime during live migration of busy VM is much higher than migration_downtime in vdsm.conf)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.452.el6
changelog:
  - kvm-Revert-Documentation-Mention-qcow2-full-preallocatio.patch [bz#1040220]
  - kvm-Revert-qcow2-Add-full-image-preallocation-option.patch [bz#1040220]
  - kvm-rename-parse_enum_option-to-qapi_enum_parse-and-make.patch [bz#1040220]
  - kvm-qapi-introduce-PreallocMode-and-new-PreallocModes-fu.patch [bz#1040220]
  - kvm-raw-posix-Add-falloc-and-full-preallocation-option.patch [bz#1040220]
  - kvm-qcow2-Add-falloc-and-full-preallocation-option.patch [bz#1040220]
  - kvm-block-raw-posix-Fix-preallocating-write-loop.patch [bz#1040220]
  - kvm-block-raw-posix-Only-sync-after-successful-prealloca.patch [bz#1040220]
  - kvm-block-raw-posix-Catch-fsync-errors.patch [bz#1040220]
  - kvm-ide-Check-validity-of-logical-block-size.patch [bz#1134693]
  - (no patch file - commit af477bddc913d0e7c51bf6626445fac02f52ef2b) [bz#1061502]
  - Resolves: bz#1040220
    ([Fujitsu 6.7 FEAT] qemu-img should use fallocate() system call for "preallocation=full" option)
  - Resolves: bz#1134693
    (fail to specify the physical_block_size/logical_block_size value not 512 for IDE disk)
  - Resolves: bz#1061502
    (Remove support for qemu-kvm-test.patch from qemu-kvm SRPM)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.453.el6
changelog:
  - kvm-main-loop-Assert-that-fd-doesn-t-exceed-FD_SETSIZE.patch [bz#1024684]
  - kvm-block-add-cache-directsync-parameter-to-drive.patch [bz#1186914]
  - kvm-mc146818rtc-add-rtc-reset-reinjection-QMP-command.patch [bz#1190248]
  - kvm-qemu-tool-add-qemu_timer_pending-stub-function.patch [bz#1132848]
  - kvm-throttle-Add-a-new-throttling-API-implementing-conti.patch [bz#1132848]
  - kvm-block-Repair-the-throttling-code.patch [bz#1132848]
  - kvm-block-Enable-the-new-throttling-code-in-the-block-la.patch [bz#1132848]
  - kvm-qemu-options.hx-conditionally-remove-bps-and-iops-op.patch [bz#1134230]
  - Resolves: bz#1024684
    (Report error if there are too many open file descriptors)
  - Resolves: bz#1132848
    (IO throttling will ignore the limited of iops if from set iops=10 back to the previous value)
  - Resolves: bz#1134230
    (qemu-kvm's help output shows bps= is supported, even though it's not)
  - Resolves: bz#1186914
    (RHEL6 qemu-kvm: backport cache=directsync)
  - Resolves: bz#1190248
    (qemu-kvm: backport rtc-reset-reinjection command)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.454.el6
changelog:
  - kvm-PCI-Bus-number-from-the-bridge-not-the-device.patch [bz#1010828]
  - kvm-spice-set-spice-uuid-and-name.patch [bz#1129780]
  - kvm-qxl-keep-going-if-reaching-guest-bug-on-empty-area.patch [bz#1151363]
  - kvm-spice-auth-fixes.patch [bz#1115237]
  - Resolves: bz#1010828
    (The addr was wrong in qtree info when assign VFs with multifunction=on and specified the addr (QLogic card))
  - Resolves: bz#1115237
    (spice connection break while set_password with sasl enabled)
  - Resolves: bz#1129780
    (Send vm name and uuid via spice)
  - Resolves: bz#1151363
    (User interface freezes when entering space character in Xfig)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.455.el6
changelog:
  - kvm-implement-vnc_dpy_setdata.patch [bz#1161084]
  - kvm-spice-call-qemu_spice_set_passwd-during-init.patch [bz#1138647]
  - kvm-Revert-Build-rbd-block-driver-only-for-qemu-kvm-rhev.patch [bz#1154876]
  - kvm-Revert-rbd-Only-look-for-qemu-specific-copy-of-librb.patch [bz#1154876]
  - kvm-Revert-rbd-link-and-load-librbd-dynamically.patch [bz#1154876]
  - kvm-configure-Fix-bad-import-from-upstream.patch [bz#1154876]
  - Resolves: bz#1138647
    (fail to login spice session with password + expire time)
  - Resolves: bz#1154876
    (Enable native qemu support for Ceph)
  - Resolves: bz#1161084
    (Black screen after X started in qemu-kvm with -vga std parameter under RHEL6.6)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.456.el6
changelog:
  - kvm-qemu-img-add-support-for-skipping-zeroes-in-input-du.patch [bz#1006681]
  - Resolves: bz#1006681
    (qemu-img convert -p option display error)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.457.el6
changelog:
  - kvm-qemu-img-Tighten-parsing-of-size-arguments.patch []
  - kvm-cutils-change-strtosz_suffix_unit-function.patch []
  - kvm-qemu-img-report-size-overflow-error-message.patch []
  - kvm-qemu-img-decrease-progress-update-interval-on-conver.patch []
  - kvm-qemu-img-Plug-memory-leak-in-convert-command.patch []
  - kvm-qemu-option-has_help_option-and-is_valid_option_list.patch []
  - kvm-qemu-img-create-Support-multiple-o-options.patch []
  - kvm-qemu-img-convert-Support-multiple-o-options.patch []
  - kvm-qemu-img-Allow-o-help-with-incomplete-argument-list.patch []
  - kvm-qemu-img-convert-Fix-progress-output.patch []
  - kvm-block-add-null-protocol-for-performance-tests.patch [bz#1193917]
  - Resolves: bz#1193917
    (Include null block driver)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.458.el6
changelog:
  - kvm-hmp-info-spice-Show-string-channel-name.patch [bz#822418]
  - kvm-fix-bz-1196970.patch [bz#1196970]
  - Resolves: bz#1196970
    (Migrate status is failed after migrate_cancel.)
  - Resolves: bz#822418
    (RFE: print channel name in addition to code in 'info spice')


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.459.el6
changelog:
  - kvm-vga-raise-xres-yres-limits.patch [bz#1053039]
  - kvm-vga-make-vram-size-configurable.patch [bz#1053039]
  - kvm-qxl-add-vgamem_size_mb-and-vgamem_size.patch [bz#1053039]
  - kvm-qxl-add-4k-8k-resolutions.patch [bz#1053039]
  - kvm-hw-display-qxl-fix-signed-to-unsigned-comparison.patch [bz#1053039]
  - kvm-qxl-add-2000x2000-and-2048x2048-video-modes.patch [bz#1053039]
  - kvm-vbe-make-bochs-dispi-interface-return-the-correct-me.patch [bz#1053039]
  - kvm-vbe-rework-sanity-checks.patch [bz#1053039]
  - kvm-spice-make-sure-we-don-t-overflow-ssd-buf.patch [bz#1053039]
  - Resolves: bz#1053039
    ([SPICE] Add 2048x2048, 4096x2160 and 3840x2160 resolutions to QXL driver)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.460.el6
changelog:
  - Commit id 9e50814b1ea77527b8e4125467071b7e7c519849 [bz#1128594]
  - Commit id 319181316d540e0a328de6268fbc51d3a454f953 [bz#1061502]
  - Commit id e89c0d0cdd5f2a50ab72b9ed915cf938193ca0a7 [bz#1204858]
  - Resolves: bz#1128594
    (wrong executable authority for qemu-iotests test for the RHEL 6 internal repository)
  - Resolves: bz#1061502
    (Remove support for qemu-kvm-test.patch from qemu-kvm SRPM)
  - Resolves: bz#1204858
    ("null" block driver is not whitelisted for running guests)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.461.el6
changelog:
  - kvm-posix-aio-merge-posix_aio_process_queue-and-posix_ai.patch [bz#1005016]
  - kvm-aio-remove-process_queue-callback-and-qemu_aio_proce.patch [bz#1005016]
  - kvm-aio-return-AIO-in-progress-state-from-qemu_aio_wait.patch [bz#1005016]
  - kvm-aio-simplify-qemu_aio_wait.patch [bz#1005016]
  - kvm-aio-Fix-qemu_aio_wait-to-maintain-correct-walking_v2.patch [bz#1005016]
  - kvm-aio-Another-fix-to-the-walking_handlers-logic_v2.patch [bz#1005016]
  - kvm-aio-introduce-AioContext-move-bottom-halves-there.patch [bz#1005016]
  - kvm-aio-add-I-O-handlers-to-the-AioContext-interface.patch [bz#1005016]
  - kvm-aio-test-node-deleted-before-calling-io_flush.patch [bz#1005016]
  - kvm-aio-add-non-blocking-variant-of-aio_wait.patch [bz#1005016]
  - kvm-aio-prepare-for-introducing-GSource-based-dispatch.patch [bz#1005016]
  - kvm-aio-add-Win32-implementation.patch [bz#1005016]
  - kvm-aio-make-AioContexts-GSources.patch [bz#1005016]
  - kvm-main-loop-use-msec-based-timeout-in-glib_select_fill.patch [bz#1005016]
  - kvm-main-loop-switch-to-g_poll-on-POSIX-hosts.patch [bz#1005016]
  - kvm-main-loop-switch-POSIX-glib-integration-to-GPollFD.patch [bz#1005016]
  - kvm-slirp-slirp-slirp.c-coding-style-cleanup.patch [bz#1005016]
  - kvm-slirp-switch-to-GPollFD.patch [bz#1005016]
  - kvm-slirp-Properly-initialize-pollfds_idx-of-new-sockets.patch [bz#1005016]
  - kvm-iohandler-switch-to-GPollFD.patch [bz#1005016]
  - kvm-main-loop-drop-rfds-wfds-xfds-for-good.patch [bz#1005016]
  - kvm-aio-extract-aio_dispatch-from-aio_poll.patch [bz#1005016]
  - kvm-aio-convert-aio_poll-to-g_poll-3.patch [bz#1005016]
  - kvm-aio-Fix-return-value-of-aio_poll.patch [bz#1005016]
  - kvm-aio-fix-aio_ctx_prepare-with-idle-bottom-halves.patch [bz#1005016]
  - Commit id: 078c7d29e94c6c6ed7f089270a33df7fff2a30a4 [bz#1170757]
  - Commit id: f99da979a46bc957b7bdb5edb8d0e22ef0d2df9b [bz#1170757]
  - Commit id: 95e56aae9369684d97310a2192fca67939caf2e9 [bz#1170757]
  - Commit id: 8100b3a63c93ec21fd2b9e2108763f9a3f052ca8 [bz#1170757]
  - Commit id: 0fe3847ff1841b8200959f75e233f683f561d38b [bz#1170757]
  - kvm-rng-initialize-file-descriptor-to-1.patch [bz#1119575]
  - kvm-qom-fix-leak-for-objects-created-with-object.patch [bz#1119575]
  - kvm-virtio-rng-unreference-rng-backend-in-pci-exit-only-.patch [bz#1119575]
  - Resolves: bz#1005016
    (Qemu w/ macvtap backend virtual network hangs when the fd is over 1024)
  - Resolves: bz#1119575
    ([virtio-win][rng] Core dump occurs after busy virtio-rng-pci is deleted from windows guest)
  - Resolves: bz#1170757
    (RHEL6 as a guest on IBM's Power/KVM - guest agent)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.462.el6
changelog:
  - Use  syntax to avoid errors with undefined variable [bz#1170757]
  - Resolves: bz#1170757
    (RHEL6 as a guest on IBM's Power/KVM - guest agent)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.463.el6
changelog:
  - kvm-Revert-spec-Enable-rbd-driver-add-dependency.patch []
  - kvm-Revert-configure-Fix-bad-import-from-upstream.patch []
  - kvm-Revert-Revert-rbd-link-and-load-librbd-dynamically.patch []
  - kvm-Revert-Revert-rbd-Only-look-for-qemu-specific-copy-o.patch []
  - kvm-Revert-Revert-Build-rbd-block-driver-only-for-qemu-k.patch []
  - Reverts: 1154876
    (Enable native qemu support for Ceph)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.464.el6
changelog:
  - kvm-cirrus-fix-blit-region-check.patch [bz#1169455]
  - kvm-cirrus-don-t-overflow-CirrusVGAState-cirrus_bltbuf.patch [bz#1169455]
  - Resolves: bz#1169455
    (CVE-2014-8106 qemu-kvm: qemu: cirrus: insufficient blt region checks [rhel-6.7])


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.465.el6
changelog:
  - kvm-block-Add-Error-parameter-to-bdrv_find_protocol.patch [bz#1202666]
  - kvm-net-add-netdev-options-to-man-page.patch [bz#1110634]
  - kvm-hw-qxl-fix-condition-for-exiting-guest_bug.patch [bz#1200019]
  - kvm-block-update-test-084.out-to-match-error-output-repo.patch [bz#1130046]
  - kvm-iotests-Remove-006.patch [bz#1130015]
  - kvm-iotests-Drop-vpc-from-004-s-and-104-s-format-list.patch [bz#1130015]
  - kvm-block-update-test-088.out-to-match-error-output-repo.patch [bz#1130015]
  - Resolves: bz#1110634
    (Should update manpage of qemu-kvm in the "Network options:" part)
  - Resolves: bz#1130015
    (test case 004 006 and 088 of qemu-iotests fail for vpc)
  - Resolves: bz#1130046
    (test case 084 of qemu-iotests fail for vdi)
  - Resolves: bz#1200019
    (Coverity-detected defect: constant expression result)
  - Resolves: bz#1202666
    (improve the error hint when show rbd storage info via qemu-img)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.466.el6
changelog:
  - kvm-block-Fix-query-block-after-disabling-throttling.patch [bz#1211545]
  - Resolves: bz#1211545
    (query-block doesn't reflect the correct value after live throttling)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.467.el6
changelog:
  - kvm-virtio-blk-Use-blk_aio_ioctl.patch [bz#1006871]
  - kvm-virtio-blk-Check-return-value-of-blk_aio_ioctl.patch [bz#1006871]
  - kvm-configure-Fix-usb_redir-probing.patch [bz#1208605]
  - kvm-configure-cull-BRLAPI-options.patch [bz#1208605]
  - kvm-configure-properly-check-if-lrt-and-lm-is-needed.patch [bz#1208605]
  - kvm-configure-duplicate-incorrect-order-of-lrt.patch [bz#1208605]
  - kvm-curl-Fix-local-build-issue.patch [bz#1208605]
  - kvm-block-migration-Flush-requests-in-blk_mig_cleanup.patch [bz#916067]
  - kvm-slim-down-qdev-core.h.patch [bz#1141594]
  - kvm-qdev-add-qbus_reset_all.patch [bz#1141594]
  - kvm-virtio-scsi-abort-in-flight-I-O-when-the-device-is-r.patch [bz#1141594]
  - Resolves: bz#1006871
    ([FJ6.4 Bug] SG_IO ioctl issued to a virtio block device not return)
  - Resolves: bz#1141594
    (qemu-kvm core dumped when win7 guest doing system_reset more than 20 times)
  - Resolves: bz#1208605
    (support local builds of qemu-kvm on Fedora systems)
  - Resolves: bz#916067
    (when cancel the migration with ctrl+c during block migration(full disk copy or incremental disk copy), then migration again will cause domain destroyed)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.468.el6
changelog:
  - kvm-Revert-virtio-blk-Check-return-value-of-blk_aio_ioct.patch [bz#1006871]
  - kvm-Revert-virtio-blk-Use-blk_aio_ioctl.patch [bz#1006871]
  - kvm-virtio-blk-remove-dead-variable-in-virtio_blk_handle.patch [bz#1006871]
  - kvm-virtio-blk-report-non-zero-status-when-failing-SG_IO.patch [bz#1006871]
  - kvm-virtio-blk-fix-use-after-free-while-handling-scsi-co.patch [bz#1006871]
  - kvm-virtio-blk-Use-blk_aio_ioctl-v2.patch [bz#1006871]
  - kvm-virtio-blk-Check-return-value-of-blk_aio_ioctl-v2.patch [bz#1006871]
  - Resolves: bz#1006871
    ([FJ6.4 Bug] SG_IO ioctl issued to a virtio block device not return)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.469.el6
changelog:
  - kvm-qcow2-Ignore-reserved-bits-in-L1-L2-entries.patch [bz#1129892]
  - kvm-qcow2-Factor-out-count_cow_clusters.patch [bz#1129892]
  - kvm-qcow2-Ignore-reserved-bits-in-count_contiguous_clust.patch [bz#1129892]
  - kvm-qcow2-Fail-write_compressed-when-overwriting-data.patch [bz#1129892]
  - kvm-qcow2-Refactor-qcow2_free_any_clusters.patch [bz#1129892]
  - kvm-qcow2-Simplify-count_cow_clusters.patch [bz#1129892]
  - kvm-qcow2-Ignore-reserved-bits-in-check_refcounts.patch [bz#1129892]
  - kvm-qcow2-cache-Empty-cache.patch [bz#1129892]
  - kvm-qcow2-Catch-bdrv_getlength-error.patch [bz#1129892]
  - kvm-block-Introduce-qemu_try_blockalign.patch [bz#1129892]
  - kvm-iotests-Add-test-for-image-header-overlap.patch [bz#1129892]
  - kvm-block-Catch-bs-drv-in-bdrv_check.patch [bz#1129892]
  - kvm-qapi-block-Add-fatal-to-BLOCK_IMAGE_CORRUPTED.patch [bz#1129892]
  - kvm-qcow2-Add-qcow2_signal_corruption.patch [bz#1129892]
  - kvm-qcow2-Use-qcow2_signal_corruption-for-overlaps.patch [bz#1129892]
  - kvm-qcow2-Check-L1-L2-reftable-entries-for-alignment.patch [bz#1129892]
  - kvm-iotests-Add-more-tests-for-qcow2-corruption.patch [bz#1129892]
  - kvm-qcow2-Do-not-overflow-when-writing-an-L1-sector.patch [bz#1129892]
  - kvm-iotests-Add-test-for-qcow2-L1-table-update.patch [bz#1129892]
  - kvm-block-Add-qemu_-try_-blockalign0.patch [bz#1129892]
  - kvm-qcow2-Calculate-refcount-block-entry-count.patch [bz#1129892]
  - kvm-qcow2-Split-qcow2_check_refcounts.patch [bz#1129892]
  - kvm-qcow2-Use-sizeof-refcount_table.patch [bz#1129892]
  - kvm-qcow2-Pull-check_refblocks-up.patch [bz#1129892]
  - kvm-qcow2-Use-int64_t-for-in-memory-reftable-size.patch [bz#1129892]
  - kvm-qcow2-Split-fail-code-in-L1-and-L2-checks.patch [bz#1129892]
  - kvm-qcow2-Let-inc_refcounts-return-errno.patch [bz#1129892]
  - kvm-qcow2-Let-inc_refcounts-resize-the-reftable.patch [bz#1129892]
  - kvm-qcow2-Reuse-refcount-table-in-calculate_refcounts.patch [bz#1129892]
  - kvm-qcow2-Fix-refcount-blocks-beyond-image-end.patch [bz#1129892]
  - kvm-qcow2-Do-not-perform-potentially-damaging-repairs.patch [bz#1129892]
  - kvm-qcow2-Rebuild-refcount-structure-during-check.patch [bz#1129892]
  - kvm-qcow2-Clean-up-after-refcount-rebuild.patch [bz#1129892]
  - kvm-iotests-Fix-test-outputs.patch [bz#1129892]
  - kvm-iotests-Add-test-for-potentially-damaging-repairs.patch [bz#1129892]
  - kvm-qcow2-Drop-REFCOUNT_SHIFT.patch [bz#1129892]
  - kvm-qcow2-Fix-header-extension-size-check.patch [bz#1129892]
  - kvm-qcow2.py-Add-required-padding-for-header-extensions.patch [bz#1129892]
  - kvm-block-Don-t-probe-for-unknown-backing-file-format.patch [bz#1129892]
  - kvm-block-remove-QED-.bdrv_make_empty-implementation.patch [bz#1130022]
  - kvm-qed-Disable-buggy-zero-write-support.patch [bz#1130022]
  - kvm-qemu-iotests-Disable-test-030-for-QED.patch [bz#1130022]
  - Resolves: bz#1129892
    (Backport additional qcow2 corruption prevention and image repair patches)
  - Resolves: bz#1130022
    (test case 020 030 034 and 041 of qemu-iotests fail for qed)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.470.el6
changelog:
  - kvm-vnc-sanitize-bits_per_pixel-from-the-client.patch [bz#1157644]
  - Resolves: bz#1157644
    (CVE-2014-7815 qemu-kvm: qemu: vnc: insufficient bits_per_pixel from the client sanitization [rhel-6.7])


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.471.el6
changelog:
  - kvm-aio-switch-aiocb_size-type-int-size_t.patch [bz#1069519]
  - kvm-aio-use-g_slice_alloc-for-AIOCB-pooling.patch [bz#1069519]
  - kvm-aio-rename-AIOPool-to-AIOCBInfo.patch [bz#1069519]
  - kvm-ide-ahci-Check-for-ECANCELED-in-aio-callbacks.patch [bz#1069519]
  - kvm-block-Add-refcnt-in-BlockDriverAIOCB.patch [bz#1069519]
  - kvm-block-Add-bdrv_aio_cancel_async.patch [bz#1069519]
  - kvm-block-Drop-bdrv_em_co_aiocb_info.cancel.patch [bz#1069519]
  - kvm-block-Drop-bdrv_em_aiocb_info.cancel.patch [bz#1069519]
  - kvm-posix-aio-Remove-raw_aiocb_info.cancel.patch [bz#1069519]
  - kvm-linux-aio-Convert-laio_aiocb_info.cancel-to-.cancel_.patch [bz#1069519]
  - kvm-dma-Convert-dma_aiocb_info.cancel-to-.cancel_async.patch [bz#1069519]
  - kvm-blkdebug-Drop-blkdebug_aiocb_info.cancel.patch [bz#1069519]
  - kvm-curl-Drop-curl_aiocb_info.cancel.patch [bz#1069519]
  - kvm-qed-Drop-qed_aiocb_info.cancel.patch [bz#1069519]
  - kvm-rbd-Drop-rbd_aiocb_info.cancel.patch [bz#1069519]
  - kvm-vdi-Drop-vdi_aio_cancel.cancel.patch [bz#1069519]
  - kvm-gluster-Drop-gluster_aiocb_info.cancel.patch [bz#1069519]
  - kvm-block-Drop-AIOCBInfo.cancel.patch [bz#1069519]
  - kvm-block-Rename-qemu_aio_release-qemu_aio_unref.patch [bz#1069519]
  - kvm-scsi-Drop-scsi_req_abort.patch [bz#1069519]
  - kvm-scsi-generic-Handle-canceled-request-in-scsi_command.patch [bz#1069519]
  - kvm-scsi-Unify-request-unref-in-scsi_req_cancel.patch [bz#1069519]
  - kvm-scsi-Drop-SCSIReqOps.cancel_io.patch [bz#1069519]
  - kvm-scsi-Introduce-scsi_req_cancel_complete.patch [bz#1069519]
  - kvm-scsi-Introduce-scsi_req_cancel_async.patch [bz#1069519]
  - kvm-virtio-scsi-Handle-TMF-request-cancellation-asynchro.patch [bz#1069519]
  - kvm-scsi-fix-cancellation-when-I-O-was-completed-but-DMA.patch [bz#1069519]
  - kvm-block-Fix-bdrv_aio_co_cancel_em-RHEL-only.patch [bz#1069519]
  - kvm-qcow2-Zero-write-support.patch [bz#1130014]
  - Resolves: bz#1069519
    ([FJ6.5 Bug] A KVM guest hangs up for about 30 seconds after issuing SG_IO ioctl to a virtio-scsi device.)
  - Resolves: bz#1130014
    (test case 033 and 034 of qemu-iotests fail for vmdk)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.472.el6
changelog:
  - kvm-virtio-pci-avoid-repeatedly-deassigning-notifers-of-.patch [bz#1124311]
  - Resolves: bz#1124311
    (Qemu-kvm aborted when boot with 232 virtio NICs (multiple function is on))


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.473.el6
changelog:
  - kvm-blockdev-preserve-I-O-throttling-across-drives_reope.patch [bz#1211513]
  - Resolves: bz#1211513
    (IO throttling doesn't work after migration)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.474.el6
changelog:
  - kvm-block-avoid-useless-checks-on-acb-bh.patch [bz#1130014]
  - kvm-clean-unnecessary-code-don-t-check-g_strdup-arg-for-.patch [bz#1205288]
  - kvm-Drop-superfluous-conditionals-around-g_strdup.patch [bz#1205288]
  - kvm-util-Drop-superfluous-conditionals-around-g_free.patch [bz#1205288]
  - kvm-util-Fuse-g_malloc-memset-into-g_new0.patch [bz#1205288]
  - kvm-util-uri-uri_new-can-t-fail-drop-dead-error-handling.patch [bz#1205288]
  - kvm-util-uri-realloc2n-can-t-fail-drop-dead-error-handli.patch [bz#1205288]
  - kvm-util-uri-URI-member-path-can-be-null-compare-more-ca.patch [bz#1205288]
  - kvm-util-uri-Add-overflow-check-to-rfc3986_parse_port.patch [bz#1205288]
  - Resolves: bz#1130014
    (test case 033 and 034 of qemu-iotests fail for vmdk)
  - Resolves: bz#1205288
    (Coverity-detected defect: buffer overrun at uri.c:2035)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.475.el6
changelog:
  - kvm-fdc-force-the-fifo-access-to-be-in-bounds-of-the-all.patch [bz#1219268]
  - Resolves: bz#1219268
    (EMBARGOED CVE-2015-3456 qemu-kvm: qemu: floppy disk controller flaw [rhel-6.7])


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.476.el6
changelog:
  - kvm-block-Fix-bdrv_aio_cancel-RHEL-only.patch [bz#1220674]
  - Resolves: bz#1220674
    (Received no response to QMP command 'system_reset')


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.477.el6
changelog:
  - kvm-pcnet-fix-Negative-array-index-read.patch [bz#1225887]
  - kvm-pcnet-force-the-buffer-access-to-be-in-bounds-during.patch [bz#1225887]
  - Resolves: bz#1225887
    (EMBARGOED CVE-2015-3209 qemu-kvm: qemu: pcnet: multi-tmd buffer flow in the tx path [rhel-6.7])


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.478.el6
changelog:
  - kvm-vdi-Avoid-direct-AIO-callback.patch [bz#1130046]
  - kvm-vdi-Initialize-acb-bh-in-vdi_aio_setup.patch [bz#1130046]
  - Resolves: bz#1130046
    (test case 084 of qemu-iotests fail for vdi)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.479.el6
changelog:
  - kvm-posix-aio-compat-fix-acb-ev_signo-race-condition.patch [bz#1233292]
  - Resolves: bz#1233292
    (qemu-kvm randomly crashes with "kill failed failed: Invalid argument")


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.479.el6_7.1
changelog:
  - kvm-rtl8139-avoid-nested-ifs-in-IP-header-parsing-CVE-20.patch [bz#1248761]
  - kvm-rtl8139-drop-tautologous-if-ip-.-statement-CVE-2015-.patch [bz#1248761]
  - kvm-rtl8139-skip-offload-on-short-Ethernet-IP-header-CVE.patch [bz#1248761]
  - kvm-rtl8139-check-IP-Header-Length-field-CVE-2015-5165.patch [bz#1248761]
  - kvm-rtl8139-check-IP-Total-Length-field-CVE-2015-5165.patch [bz#1248761]
  - kvm-rtl8139-skip-offload-on-short-TCP-header-CVE-2015-51.patch [bz#1248761]
  - kvm-rtl8139-check-TCP-Data-Offset-field-CVE-2015-5165.patch [bz#1248761]
  - Resolves: bz#1248761
    (CVE-2015-5165 qemu-kvm: Qemu: rtl8139 uninitialized heap memory information leakage to guest [rhel-6.7.z])


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.479.el6_7.2
changelog:
  - kvm-net-add-checks-to-validate-ring-buffer-pointers-CVE-.patch [bz#1263274]
  - Resolves: bz#1263274
    (CVE-2015-5279 qemu-kvm: qemu: Heap overflow vulnerability in ne2000_receive() function [rhel-6.7.z])


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.479.el6_7.3
changelog:
  - kvm-net-pcnet-add-check-to-validate-receive-data-size-CV.patch [bz#1287950]
  - kvm-pcnet-fix-rx-buffer-overflow-CVE-2015-7512.patch [bz#1287950]
  - Resolves: bz#1287950
    (CVE-2015-7504 CVE-2015-7512 qemu-kvm: various flaws [rhel-6.7.z])


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.479.el6_7.4
changelog:
  - kvm-fw_cfg-add-check-to-validate-current-entry-value-CVE.patch [bz#1298045]
  - Resolves: bz#1298045
    (CVE-2016-1714 qemu-kvm: Qemu: nvram: OOB r/w access in processing firmware configurations [rhel-6.7.z])


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.0-14
changelog:
  - Merge Pacemaker cluster resource agents:
    * Add Source1.
    * Drop noarch. We have real binaries now.
    * Update BuildRequires.
    * Update all relevant prep/build/install/files/description sections.


author: Andrew Beekhof <andrew@beekhof.net> - 3.0.0-16
changelog:
  - Create an ldirectord package
  - Update Pacameker agents to upstream version: 2198dc90bec4
    + Build: Import ldirectord.
    + Ensure HA_VARRUNDIR has a value to substitute
    + High: Add findif tool (mandatory for IPaddr/IPaddr2)
    + High: IPv6addr: new nic and cidr_netmask parameters
    + High: postfix: new resource agent
    + Include license information
    + Low (LF 2159): Squid: make the regexp match more precisely output of netstat
    + Low: configure: Fix package name.
    + Low: ldirectord: add dependency on $remote_fs.
    + Low: ldirectord: add mandatory required header to init script.
    + Medium (LF 2165): IPaddr2: remove all colons from the mac address before passing it to send_arp
    + Medium: VirtualDomain: destroy domain shortly before timeout expiry
    + Medium: shellfuncs: Make the mktemp wrappers work.
    + Remove references to Echo function
    + Remove references to heartbeat shellfuncs.
    + Remove useless path lookups
    + findif: actually include the right header. Simplify configure.
    + ldirectord: Remove superfluous configure artifact.
    + ocf-tester: Fix package reference and path to DTD.


author: Andrew Beekhof <andrew@beekhof.net> - 3.0.3-3
changelog:
  - Update Pacameker agents to upstream version: 099c0e5d80db
    + Add the ha_parameter function back into .ocf-shellfuncs.
    + Bug bnc#534803 - Provide a default for MAILCMD
    + Fix use of undefined macro @HA_NOARCHDATAHBDIR@
    + High (LF 2138): IPsrcaddr: replace 0/0 with proper ip prefix (thanks to Michael Ricordeau and Michael Schwartzkopff)
    + Import shellfuncs from heartbeat as badly written RAs use it
    + Medium (LF 2173): nfsserver: exit properly in nfsserver_validate
    + Medium: RA: Filesystem: implement monitor operation
    + Medium: RA: VirtualDomain: loop on status if libvirtd is unreachable
    + Medium: RA: VirtualDomain: loop on status if libvirtd is unreachable (addendum)
    + Medium: RA: iSCSILogicalUnit: use a 16-byte default SCSI ID
    + Medium: RA: iSCSITarget: be more persistent deleting targets on stop
    + Medium: RA: portblock: add per-IP filtering capability
    + Medium: mysql-proxy: log_level and keepalive parameters
    + Medium: oracle: drop spurious output from sqlplus
    + RA: Filesystem: allow configuring smbfs mounts as clones


author: Andrew Beekhof <andrew@beekhof.net> - 3.0.4-2
changelog:
  - Update Pacameker agents to upstream version: e2338892f59f
    + High: send_arp - turn on unsolicited mode for compatibilty with the libnet version's exit codes
    + High: Trap sigterm for compatibility with the libnet version of send_arp
    + Medium: Bug - lf#2147: IPaddr2: behave if the interface is down
    + Medium: IPv6addr: recognize network masks properly
    + Medium: RA: VirtualDomain: avoid needlessly invoking "virsh define"


author: Andrew Beekhof <andrew@beekhof.net> - 3.0.5-2
changelog:
  - Update Pacameker agents to upstream version: bc00c0b065d9
    + High: RA: introduce OCF_FUNCTIONS_DIR, allow it to be overridden (LF2239)
    + High: doc: add man pages for all RAs (LF2237)
    + High: syslog-ng: new RA
    + High: vmware: make meta-data work and several cleanups (LF 2212)
    + Medium: .ocf-shellfuncs: add ocf_is_probe function
    + Medium: Dev: make RAs executable (LF2239)
    + Medium: IPv6addr: ifdef out the ip offset hack for libnet v1.1.4 (LF 2034)
    + Medium: add mercurial repository version information to .ocf-shellfuncs
    + Medium: build: add perl-MailTools runtime dependency to ldirectord package (LF 1469)
    + Medium: iSCSITarget, iSCSILogicalUnit: support LIO
    + Medium: nfsserver: use check_binary properly in validate (LF 2211)
    + Medium: nfsserver: validate should not check if nfs_shared_infodir exists (thanks to eelco@procolix.com) (LF 2219)
    + Medium: oracle/oralsnr: export variables properly
    + Medium: pgsql: remove the previous backup_label if it exists
    + Medium: postfix: fix double stop (thanks to Dinh N. Quoc)
    + RA: LVM: Make monitor operation quiet in logs (bnc#546353)
    + RA: Xen: Remove instance_attribute "allow_migrate" (bnc#539968)
    + ldirectord: OCF agent: overhaul


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.6-1
changelog:
  - New rgmanager resource agents upstream release
  - spec file update:
    * use global instead of define
    * use new Source0 url
    * use resource-agents macro more aggressively


author: Andrew Beekhof <andrew@beekhof.net> - 3.0.6-2
changelog:
  - Update Pacameker agents to upstream version: c76b4a6eb576
    + High: RA: VirtualDomain: fix forceful stop (LF 2283)
    + High: apache: monitor operation of depth 10 for web applications (LF 2234)
    + Medium: IPaddr2: CLUSTERIP/iptables rule not always inserted on failed monitor (LF 2281)
    + Medium: RA: Route: improve validate (LF 2232)
    + Medium: mark obsolete RAs as deprecated (LF 2244)
    + Medium: mysql: escalate stop to KILL if regular shutdown doesn't work


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.7-2
changelog:
  - Drop support for drbd and smb (PM-drop-support-for-drbd-and-smb-resource-agents.patch)
  - Explicitly list python as BuildRequires


author: Marek Grac <mgrac@redhat.com> - 3.0.7-4
changelog:
  - Checksum error occurs on HA-LVM
  - status on clusterfs "gfs" returned 1 (generic error)
  - Resolves rhbz#563555 rhbz#558664


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.9-1
changelog:
  - new upstream release
    Resolves: rhbz#569959
  - spec file update:
    * update spec file copyright date
    * use bz2 tarball


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-1
changelog:
  - Rebase on top of new upstream bug fix only release:
    * drop all bug fix patches.
    * refresh patches with official SHA1 git commits from RHEL6
      upstream branch:
      - drop_support_for_drbd_and_smb.patch
    * Addresses the follwing issues:
      from 3.0.12 release:
    Resolves: rhbz#582754, rhbz#582753, rhbz#585217, rhbz#583789
    * Rebase:
    Resolves: rhbz#582353
  - Stop build on ppc and ppc64.
    Resolves: rhbz#590997
  - Switch to file based Requires.
    Also address several other problems related to missing runtime
    components in different agents.
    With the current Requires: set, we guarantee all basic functionalities
    out of the box for lvm/fs/clusterfs/netfs/networking.
    Resolves: rhbz#584800
  - New pacemaker agents upstream release
    * Patched build process to correctly generate ldirectord man page
    + High: pgsql: properly implement pghost parameter
    + High: RA: mysql: fix syntax error
    + High: SAPInstance RA: do not rely on op target rc when monitoring clones (lf#2371)
    + High: set the HA_RSCTMP directory to /var/run/resource-agents (lf#2378)
    + High: RA: vmware: fix set_environment() invocation (LF 2342)
    + High: RA: vmware: update to version 0.2
    + Medium: IPaddr/IPaddr2: add a description of the assumption in meta-data
    + Medium: IPaddr: return the correct code if interface delete failed
    + Medium: nfsserver: rpc.statd as the notify cmd does not work with -v (thanks to Carl Lewis)
    + Medium: oracle: reduce output from sqlplus to the last line for queries (bnc#567815)
    + Medium: pgsql: implement "config" parameter
    + Medium: RA: iSCSITarget: follow changed IET access policy
    + Medium: Filesystem: prefer /proc/mounts to /etc/mtab for non-bind mounts (lf#2388)
    + Medium: IPaddr2: don't bring the interface down on stop (thanks to Lars Ellenberg)
    + Medium: IPsrcaddr: modify the interface route (lf#2367)
    + Medium: ldirectord: Allow multiple email addresses (LF 2168)
    + Medium: ldirectord: fix setting defaults for configfile and ldirectord (lf#2328)
    + Medium: meta-data: improve timeouts in most resource agents
    + Medium: nfsserver: use default values (lf#2321)
    + Medium: ocf-shellfuncs: don't log but print to stderr if connected to a terminal
    + Medium: ocf-shellfuncs: don't output to stderr if using syslog
    + Medium: oracle/oralsnr: improve exit codes if the environment isn't valid
    + Medium: RA: iSCSILogicalUnit: fix monitor for STGT
    + Medium: RA: make sure that OCF_RESKEY_CRM_meta_interval is always defined (LF 2284)
    + Medium: RA: ManageRAID: require bash
    + Medium: RA: ManageRAID: require bash
    + Medium: RA: VirtualDomain: bail out early if config file can't be read during probe (Novell 593988)
    + Medium: RA: VirtualDomain: fix incorrect use of __OCF_ACTION
    + Medium: RA: VirtualDomain: improve error messages
    + Medium: RA: VirtualDomain: spin on define until we definitely have a domain name
    + Medium: Route: add route table parameter (lf#2335)
    + Medium: sfex: don't use pid file (lf#2363,bnc#585416)
    + Medium: sfex: exit with success on stop if sfex has never been started (bnc#585416)


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-2
changelog:
  - Drop Requires on xfsprogs since package moved to another channel
    Resolves: rhbz#593433
  - Fix HALVM: lvm agent incorrectly reports vg is in volume_list
    (halvm_lvm_agent_incorrectly_reports_vg_in_volume_list.patch)
    Resolves: rhvz#593108


author: Andrew Beekhof <andrew@beekhof.net> - 3.0.12-4
changelog:
  - Add missing man pages
    (Add Source2: ocf-tester.8 and Source3: sfex_init.8)
    Resolves: rhbz#594332


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-5
changelog:
  - Fix incorrect default for VM.sh agent
    (resolve_incorrect_default_for_vm_agent.patch)
    Resolves: rhbz#599643


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-6
changelog:
  - Add missing documentation for resource agents
    (add_missing_resource_docs.patch)
  - Clean up recursion in scheman output and documentation
    (clean_up_recursion_and_documentation.patch)
    Resolves: rhbz#606470


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-7
changelog:
  - Make vm.sh honor start and stop timeouts
    (Make_vm.sh_use_stop_start_timeouts.patch)
    Resolves: rhbz#606754


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-8
changelog:
  - Make fs-lib resolve links before checking for block devices
    (fix_incorrect_link_resolution_in_fs_lib.patch)
    Resolves: rhbz#609579


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-9
changelog:
  - Add NFSv4 server support
    (add_nfsv4_support.patch)
    (install_nfsv4_agent.patch)
    Resolves: rhbz#595547
  - Fix migration mapping behavior
    (fix_migration_mapping_behavior.patch)
    Resolves: rhbz#596918


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-10
changelog:
  - Fix changelog for 3.0.12-9 date
  - Add RHEVM status program
    (add_rhevm_status_program.patch)
    Resolves: rhbz#609497


author: Marek Grac <mgrac@redhat.com> - 3.0.12-12
changelog:
  - postgres RA will fail to stop gracefully if there 
    is active client connected
    (sigquit_if_sigterm_was_not_fast_enough.patch)
    Resolves: rhbz#612165
  - new RA for tomcat6
    (resource_agent_tomcat-6.patch)
    (tomcat-6_change_build_system.patch)
    Resolves: rhbz#593721


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-13
changelog:
  - Allow other values for "yes" in fs-lib when unmounting
    file systems
    (fs-lib_allow_other_values_for_yes.patch)
    Resolves: rhbz#614421


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-14
changelog:
  - resource-agents: Drop tomcat-5 from build
    (drop_tomcat_5_from_build.patch)
    Resolves: rhbz#593721


author: Marek Grac <mgrac@redhat.com> - 3.0.12-15
changelog:
  - postgresql RA does not work correctly with netmask
    (psql_does_not_work_correctly_with_netmask.patch)
    Resolves: rhbz#614457


author: Lon Hohberger <lhh@redhat.com> - Version: 3.0.12-16
changelog:
  - resource-agents: fix utility to obtain data from ccs_tool
    (fix_utility_to_obtain_data_from_ccs_tool.patch)
    Resolves: rhbz#631943


author: Marek Grac <mgrac@redhat.com> - 3.0.12-17
changelog:
  - fix resource agent for named
    (resource-agents-fix-resource-agent-for-named.patch)
    Resolves: rhbz#648897


author: Marek Grac <mgrac@redhat.com> - 3.0.12-18
changelog:
  - Disable updates to static routes by RHCS IP tooling
    (resource-agents-Add-option-disable_rdisc-to-ip.sh.patch)
    Resolves: rhbz#621538


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-19
changelog:
  - resource-agents: Add multi-instance Oracle database agents
    (add_multi_instance_oracle_database_agents.patch)
    Resolves: rhbz#629275
  - resource-agents: Stop using '-' as 1st char of log messages
    (stop_using_as_1st_char_of_log_messages.patch)
    Resolves: rhbz#633856
  - resource-agents: Use literal quotes for tr calls
    (use_literal_quotes_for_tr_calls.patch)
    Resolves: rhbz#639252
  - resource-agents: Fix migrateuriopt setting
    (fix_migrateuriopt_setting.patch)
    Resolves: rhbz#660337
  - resource-agents: Support convalesce w/ central_processing
    (support_convalesce_w_central_processing.patch)
    rgmanager: Add failure tolerances to resources.rng
    (add_failure_tolerances_to_resources_rng.patch)
    Resolves: rhbz#674710


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-20
changelog:
  - resource-agents: fs-lib: fix do_monitor device mapping
    (fs_lib_fix_do_monitor_device_mapping.patch)
    Resolves: rhbz#669832


author: Lon Hohberger <lhh@redhat.com> - Version: 3.0.12-21
changelog:
  - Mirror dev failure in HA LVM can cause service failur
    (fix_bug_683213_mirror_dev_failure_in_ha_lvm_can_cause_service_failure.patch)
    Resolves: rhbz#683213


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12.1-1
changelog:
  - Rebase package on top of new upstream:
    resource-agents: Improve LD_LIBRARY_PATH handling by SAP*
    resource-agents: Add resource type to logging
    oracledb.sh resource script should attempt a clean shutdown first
    resource-agent does not remove nfs service temp dirs when using nfslock=1
    Listen line in generated httpd.conf incorrect
    Include rhev-check upstream
  - spec file update:
    * drop all patches
    * resync with upstream spec file. See top section for local deltas
    Resolves: rhbz#707127, rhbz#705763, rhbz#667217
  - Move rgmanager S/Lang from resource-agents to rgmanager:
    * Add versioned Conflicts on rgmanager to avoid file conflicts
    Resolves: rhbz#693518


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.9.2-1
changelog:
  - Rebase package on top of new upstream
    * ship xsl and rng files required to build relaxng schema
    * drop local copy of sfex_init.8
    * drop bz711852-Fix-ASEHAagent-to-allow-for-multiple-ASEHA-agents-on.patch
      included upstream
  - spec file update:
    add %post to generate new relaxng schema
    Resolves: rhbz#707127


author: Chris Feist <cfeist@redhat.com> - 3.9.2-2
changelog:
  - Postgres-8 resource agent now properly detects if postgresql was started
  - fs.sh resource agent now returns the proper response code when a device
    does not yet exist.
  - Resolves: rhbz#709400 rhbz#694816


author: Chris Feist <cfeist@redhat.com> - 3.9.2-3
changelog:
  - Main rgmanager resource agents now use proper return codes for use with
    pacemaker.
  - NFS mounts now unmount faster when the network is lost.
  - Resolves: rhbz#678497 rhbz#727643


author: Chris Feist <cfeist@redhat.com> - 3.9.2-4
changelog:
  - Create a link for the modified dtd for rgmanager
  - Fix ocf-tester so rgmanager agents requiring bash don't cause syntax errors
  - Resolves: rhbz#727643


author: Chris Feist <cfeist@redhat.com> - 3.9.2-9
changelog:
  - More SAPDatabase updates to fix SAP workloads
  - Allow rgmanager SAP resource agent to manage SAP Webdispatcher & TREX
  - Resolves: rhbz#726500 rhbz#746996


author: Chris Feist <cfeist@redhat.com> - 3.9.2-10
changelog:
  - Fix to prevent /dev/shm being filled up by ocf_log debug messages
  - NFS client resource are now recovered properly when they are missing in
    /var/lib/nfs/etab
  - Resolves: rhbz#797922 rhbz#749713


author: Chris Feist <cfeist@redhat.com> - 3.9.2-11
changelog:
  - In LVM HA agent, remove missing PVs before attempting to remove the tag
  - Rgmanager now properly detects when clvmd is not running when using HA LVM
  - vm.sh now supports a 'tunnelled' option
  - Resource agent script now have common directory set properly
  - Fixed apache resource agent configuration with IPv6
  - fs-lib.sh now will now properly work with all return codes of mount
  - netfs now allows you to have the same NFS export mounted in different locations
  - The timeout in rhev-check has been increased to 90 seconds
  - Resolves: rhbz#772773 rhbz#729481 rhbz#712174 rhbz#784357 rhbz#742859 rhbz#728086 rhbz#799998 rhbz#727546


author: Chris Feist <cfeist@redhat.com> - 3.9.2-12
changelog:
  - Fix for LVM HA agent for service relocation after leg failure (we now
    properly remove tag).
  - Resolves: rhbz#772773


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.9.2-13
changelog:
  - Add nfsrestart option to fs and clustefs agents as last resource to umount the filesystem
  - Resolves: rhbz#822053


author: Chris Feist <cfeist@redhat.com> - 3.9.2-14
changelog:
  - Fixed issue causing fs.sh to fail when a device is still mounted
  - Fixed random servie failures when starting multiple HA LVM services
  - Tomcat resource now uses the proper defaults
  - The pacemaker SAPInstance and SAPDatabase resources were updated to their
    latest version
  - Updated lvm resource agent to not produce errors when used with pacemaker
  - oracledb.sh script now properly checks the status of the Oracle database
  - HA-LVM now supports RAID logical volumes
  - ip.sh now properly assignes the ip address to the correct interface on
    hosts with multiple interfaces on the same network
  - Stopping a filesystem when a device doesn't exist no longer results in
    failure
  - Log output from the 'status' action from netfs is now properly logged
  - In HA LVM clusters using tags, changing the lvm.conf file is now possible
  - Using rg_test with HA LVM resources no longer results in a
    "too many arguments" error 
  - Resolves: rhbz#728365 rhbz#714156 rhbz#853249 rhbz#843049 rhbz#817550 rhbz#729812 rhbz#839181 rhbz#824153 rhbz#822244 rhbz#860328 rhbz#847335 rhbz#834293


author: Chris Feist <cfeist@redhat.com> - 3.9.2-15
changelog:
  - Fixes issue with rgmanager not recognizing a mounted cifs share due to
    trailing slashes
  - Resolves: rhbz#848642


author: Chris Feist <cfeist@redhat.com> - 3.9.2-16
changelog:
  - Add support for 'volume group per service HA-LVM support for RAID logical
    volumes'
  - Resolves: rhbz#824153


author: Chris Feist <cfeist@redhat.com> - 3.9.2-17
changelog:
  - HA LVM is now able to properly shutdown when device failures cause LVs
    to go missing which allows the service to migrate to another machine
  - Resolves: rhbz#860981


author: Chris Feist <cfeist@redhat.com> - 3.9.2-19
changelog:
  - Better error messages for the script resource have been added to aid
    debugging
  - Resolves: rhbz#773478


author: Chris Feist <cfeist@redhat.com> - 3.9.2-20
changelog:
  - Update the rgmanager SAPInstance agent so resource limits configured in
    /usr/sap/services are properly applied.
  - Resolves: rhbz#869695


author: Chris Feist <cfeist@redhat.com> - 3.9.2-21
changelog:
  - Fixed missing '$' in lvm_by_vg.sh script
  - Retry VG shutdown to cope with udev collisions
  - Resolves: rhbz#729812


author: David Vossel <dvossel@redhat.com> - 3.9.2-25
changelog:
  - fast filesystem mounts
  - properly handle NFS v4 mounts
  - fix uppercase ipv6 addresses
  - named transfer source options
  - fix restart postgres
  - fix honor self fence option
  - fix mount log level
  - fix wrong selinux context for nfs directory

    Resolves: rhbz#919231
    Resolves: rhbz#851188
    Resolves: rhbz#895075
    Resolves: rhbz#711586
    Resolves: rhbz#871659
    Resolves: rhbz#908457
    Resolves: rhbz#948730
    Resolves: rhbz#959520


author: David Vossel <dvossel@redhat.com> - 3.9.2-31
changelog:
  - Fixes lvm agent unncessarily removing PVs/LVs when some
    PVs in VG fail.

    Resolves: rhbz#884326


author: David Vossel <dvossel@redhat.com> - 3.9.2-35
changelog:
  - Fixes invalid return statement in LVM retry clvmd activation
  - Adds ability to disable findmnt to avoid autofs complications
    for fs-util based rgmanager agents.

    Resolves: rhbz#974941
    Resolves: rhbz#989284


author: David Vossel <dvossel@redhat.com> - 3.9.2-37
changelog:
  - Fixes lvm metadata corruption caused when activating by lv
    using tags.

    Resolves: rhbz#1009772


author: David Vossel <dvossel@redhat.com> - 3.9.2-38
changelog:
  - Removes usage of fuser -kvm from fs-lib.sh based agents.
    This resolves issue with fuser blocking netfs mounts.
  - tomcat-6.sh, Do not fail on stop if config validation fails.
  - tomcat-6.sh, Set tomcat usr correctly.

    Resolves: rhbz#981717 
    Resolves: rhbz#983273
    Resolves: rhbz#1014298


author: David Vossel <dvossel@redhat.com> - 3.9.2-39
changelog:
  - Fixes issue with mysql agent not being able to set transient
    attributes on local node correctly.

    Resolves: rhbz#989284


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.9.2-40.2
changelog:
  - Fix netnfs unmount self_fence integration in netfs.sh
  - Ship send_ua helper binary to allow IPaddr2 to manage IPv6 addresses

    Resolves: rhbz#1027410
    Resolves: rhbz#1027412


author: David Vossel <dvossel@redhat.com> - 3.9.2-41
changelog:
  - Add no_unmount functionality back into netfs.sh agent
  - Use crm_node instead of uname -n when referencing cluster nodes.
  - Adds Delay agent back into package.
  - Drops nginx rsyslog mysql-proxy tomcat and slapd agents.

    Resolves: rhbz#993329
    Resolves: rhbz#1023340
    Resolves: rhbz#1028421
    Resolves: rhbz#1022793


author: David Vossel <dvossel@redhat.com> - 3.9.2-42
changelog:
  - High: fs-lib.sh: Fixes failure to unmount local fs
    when process runs with cwd inside fs mount.

    Resolves: rhbz#1051115


author: David Vossel <dvossel@redhat.com> - 3.9.2-44
changelog:
  - New 'httpd' option for rgmanager apache.sh agent that allows
    custom httpd binary path to be set.
  - Fixes issue with pending sm-notify processes preventing
    nfs-server instances from stopping.
  - Fixes issue reported by coverity. 
  - Fixes syntax error in some log error messages in the LVM agent
  - Optimize fs-lib based agent's monitor operation
  - Allow monitoring of kvm based virtual machines using the
    VirtualDomain agent without requiring libvirtd.
  - Allows named to run as user other than root.

    Resolves: rhbz#952132
    Resolves: rhbz#974239
    Resolves: rhbz#999537
    Resolves: rhbz#1022277
    Resolves: rhbz#1023099
    Resolves: rhbz#1054327
    Resolves: rhbz#1067023


author: David Vossel <dvossel@redhat.com> - 3.9.2-46
changelog:
  - Updates the ocf:heartbeat:tomcat agent so it can be used
    in rhel6 with Pacemaker.

    Resolves: rhbz#1022792


author: David Vossel <dvossel@redhat.com> - 3.9.2-47
changelog:
  - Allow vm.sh to monitor kvm domains without requiring libvirtd
  - Adds 'no_kill' option to vm.sh to prevent force killing vm
    during stop operation after timeout expires.

    Resolves: rhbz#853698
    Resolves: rhbz#1079039


author: David Vossel <dvossel@redhat.com> - 3.9.2-48
changelog:
  - Configurable startup_wait timeout for rgmanager's 
    postgres-8.sh resource-agent
  - Allow non rhel builds to included unsupported agents.
  - Add bind-mount.sh rgmanager resource-agent.
  - Add 'statdport' option to nfsserver resource.

    Resolves: rhbz#1035380
    Resolves: rhbz#1069621
    Resolves: rhbz#1094789
    Resolves: rhbz#918315


author: David Vossel <dvossel@redhat.com> - 3.9.5-1
changelog:
  - Package cleanup. This change is a no-op. The heartbeat
    agents were updated to the 3.9.5 upstream release in this
    package months ago. The release number is now being
    incremented to reflect this.

    Resolves: rhbz#993431


author: David Vossel <dvossel@redhat.com> - 3.9.5-3
changelog:
  - Fix usage of findmnt in fs-lib.sh based rgmanager agents.
  - When executing force kill of processes using a mountpoint,
    take into account those processes accessing shared memory.
  - Add force_unount=safe option to avoid blocking Filesystem
    agent during the stop operation.
  - Do not fail during stop if oracle listener is already down. 
  - Correctly detect oracledb and orainstanch.sh shutdown.
  - Remove unused patches left over from before patches were
    consolidated into the new source files.

    Resolves: rhbz#1038474
    Resolves: rhbz#1089004
    Resolves: rhbz#1095943
    Resolves: rhbz#1047999
    Resolves: rhbz#960186
    Resolves: rhbz#993431


author: David Vossel <dvossel@redhat.com> - 3.9.5-5
changelog:
  - Add support for pacemaker db2 agent
  - Fix syntax error in nfsserver.sh
  - Updates pacemaker nfs server agents. Adds support for
    nfsnotify agent.

    Resolves: rhbz#1059981
    Resolves: rhbz#1091102
    Resolves: rhbz#974239


author: David Vossel <dvossel@redhat.com> - 3.9.5-7
changelog:
  - Update force_unmount=safe option so it does not process
    duplicate process ids.

    Resolves: rhbz#1095943


author: David Vossel <dvossel@redhat.com> - 3.9.5-8
changelog:
  - Revert accidental modification of exportfs's
    unlock_on_stop option.
  - Add on/off as valid value for ip.sh monitor_link

    Resolves: rhbz#1091102
    Resolves: rhbz#1039119


author: David Vossel <dvossel@redhat.com> - 3.9.5-9
changelog:
  - When signalling pids accessing a mount_point to exit,
    make sure to only signal each pid once.

    Resolves: rhbz#1089004


author: David Vossel <dvossel@redhat.com> - 3.9.5-11
changelog:
  - Updates required, unique, and primary fields in bind-mount.sh
    metadata

    Resolves: rhbz#1094789


author: David Vossel <dvossel@redhat.com> - 3.9.5-14
changelog:
  - For lv_by_vg, only strip tag on stop if we are owner.
  - NFS custom port config options
  - Fixes typo preventing passing "noload" or "data=..." mount options
  - Fixes undefined variable warning in fs-lib
  - Fixes mysql not stopped if data fs unavailable
  - Fixes postgres agent not detected correct user group
  - Handle nfs path ending in '/' correctly

    Resolves: rhbz#1161727
    Resolves: rhbz#1096376
    Resolves: rhbz#1096990
    Resolves: rhbz#1134960
    Resolves: rhbz#1150702
    Resolves: rhbz#1159018
    Resolves: rhbz#1173128


author: David Vossel <dvossel@redhat.com> - 3.9.5-16
changelog:
  - Fixes unreliable detection of nic device in IPaddr2
  - Fix fs-lib.sh regression in is_alive write test failure detection
  - Fix properly handle mysql when alternate user is specified.

    Resolves: rhbz#1181187
    Resolves: rhbz#1183735
    Resolves: rhbz#1183148


author: David Vossel <dvossel@redhat.com> - 3.9.5-17
changelog:
  - Fixes rgmanager lvm agent's ability to exclusively activate
    volume groups on nodes with aliases

    Resolves: rhbz#1085109


author: Jeff Garzik <jgarzik@redhat.com> - 2-6
changelog:
  - Resolves: bz#576678
  - increase version number of rng-utils that we obsolete
  - use global rather than define, for sbindir (Fedora pkg review)
  - improve BuildRoot (Fedora pkg review)


author: David Howells <dhowells@rehdat.com> - 2-7
changelog:
  - Resolves: bz#597221
  - Fix some compiler warnings thus dealing with the SEGV
  - Make do_loop() correctly interpret the result of iter->xread()


author: Jay Fenlason <fenlason@redhat.com> - 2-9
changelog:
  - Add patch from James M. Leddy <james.leddy@redhat.com> to add
    an option to ignore FIPS failures.
    Resolves: bz#733452


author: Jeff Garzik <jgarzik@redhat.com> - 2-13
changelog:
  - Resolves: bz#751374
  - Add post/preun calls to chkconfig, during rpm install/removal
  - Remove unused rotate, resume steps from init script


author: Steve Dickson <steved@redhat.com> 0.1.4-1
changelog:
  - Initial commit
  - Spec reviewed (bz 228894)
  - Added the Provides/Obsoletes which should
    cause rpcbind to replace portmapper


author: Steve Dickson <steved@redhat.com> 0.1.4-2
changelog:
  - Added dependency on glibc-common which allows the
    rpcinfo command to be installed in the correct place.
  - Added dependency on man-pages so the rpcinfo man 
    pages don't conflict.
  - Added the creation of /var/lib/rpcbind which will be
    used to store state files.
  - Make rpcbind run with the 'rpc' uid/gid when it exists.


author: Jeremy Katz <katzj@redhat.com> - 0.1.4-4
changelog:
  - change man-pages requires into a conflicts as we don't have to have 
    man-pages installed, but if we do, we need the newer version


author: Steve Dickson <steved@redhat.com> 0.1.4-5
changelog:
  - Added dependency on setup which contains the correct
    rpcbind /etc/service entry which in turns stops 
    rpcbind from haning when NIS is enabled. (bz 236865)


author: Steve Dickson <steved@redhat.com> 0.1.4-8
changelog:
  - Fixed typo in init script (bz 248285)
  - Added autoconf rules to turn on secure host checking
    via libwrap. Also turned on host check by default (bz 248284)
  - Changed init script to start service in runlevel 2 (bz 251568)
  - Added a couple missing Requires(pre) (bz 247134)


author: Steve Dickson <steved@redhat.com> 0.1.4-11
changelog:
  - Reworked logic in initscript so the correct exit is 
    used when networking does not exist or is set up
    incorrectly.


author: Steve Dickson <steved@redhat.com> 0.1.4-12
changelog:
  - Changed is_loopback() and check_access() see if the calling
    address is an address on a local interface, just not a loopback
    address (bz 358621).


author: Steve Dickson <steved@redhat.com> 0.1.4-13
changelog:
  - Fixed connectivity with Mac OS clients by making sure handle_reply()
    sets the correct fromlen in its recvfrom() call (bz 244492)


author: Steve Dickson <steved@redhat.com> 0.1.4-14
changelog:
  - Fixed a warning in pmap_svc.c
  - Cleaned up warmstarts so uid are longer needed, also
    changed condrestarts to use warmstarts. (bz 428496)


author: Steve Dickson <steved@redhat.com> 0.1.6-2
changelog:
  - Added usptream patches 01 thru 03 that do:
      * Introduce helpers for ipprot/netid mapping
      * Change how we decide on the netids to use for portmap
      * Simplify port live check in pmap_svc.c


author: Steve Dickson <steved@redhat.com> 0.1.6-3
changelog:
  - Fixed a typo in the rpcbind.init script that stop warm starts
    from happening with conrestarts
  - Fixed scriptlet failure (bz 462533)


author: Tom "spot" Callaway <tcallawa@redhat.com> - 0.1.7-3
changelog:
  - Replace the Sun RPC license with the BSD license, with the explicit permission of Sun Microsystems


author: Steve Dickson <steved@redhat.com> - 0.2.0-2
changelog:
  - Fixed pre scriptle failure during upgrades (bz 507364)
  - Corrected the usage info to match what the rpcbind man
      page says. (bz 466332)
  - Correct package issues (bz 503508)


author: Steve Dickson <steved@redhat.com> - 0.2.0-10
changelog:
  - Make is_loopback check more permissive (bz 731542)
  - Removed the rpcbind(3) reference in the man page (bz 813898)


author: Tomas Heinrich <theinric@redhat.com> 7.4.10-1
changelog:
  - initial import of rsyslog7
    changes since rsyslog-5.8.10-8:
    - rebase to 7.4.10
    - drop patches merged upstream
    - regenerate patches for rhbz820311, rhbz886117
    - add a patch to remove dependency on liblogging-stdlog
    - add a patch to fix compilation of omelasticsearch
      on platforms without atomic instructions
    - mark package as conlicting with rsyslog
    - update specification of dependencies
    - add the rsyslog-recover-qi.pl script
    - add new plugins
      imdiag, mmanon, mmjsonparse, mmsnmptrapd, omelasticsearch,
      pmaixforwardedfrom, pmcisconames, pmsnare
    - add new subpackage rsyslog-elasticsearch
    - make the build more verbose by adding 'V=1' to make
    - update conf file for new omusrmsg syntax
      for details, see http://www.rsyslog.com/doc/v6compatibility.html
    - drop default compatibility mode from SYSLOGD_OPTIONS
      for details, see http://www.rsyslog.com/doc/v6compatibility.html
    - fix typos in the spec file
    resolves: #869600


author: Tomas Heinrich <theinric@redhat.com> 7.4.10-2
changelog:
  - amend rsyslog.conf man page with information on omitting file sync
    resolves: #994127
  - add a patch to support TCP KEEPALIVE in imrelp
    resolves: #1009048
  - add a patch to fix missing note about message repetition in imuxsock
    resolves: #1020431
  - add a patch to prevent division-by-zero errors
    resolves: #996862
  - add a patch to fix the name of the PID file in man page
    resolves: #1009882
  - add a patch to remove references to Google ads from the html docs
    resolves: #1030040
  - add missing image files referenced from the html docs
    resolves: #1031673
  - add a patch to backport the mmcount module
    resolves: #1030206
  - add a patch to support arbitrary number of listeners in imuxsock
    resolves: #1096732
  - remove clean section
    resolves: #869600
  - add a list of bugs fixed by rebasing to 7.4.10
    resolves: #996857, #1007409, #1029910, #1061614, #1070689


author: Andrew Bartlett <abartlet@samba.org> - 0:4.0.0-0.4.alpha5.fc10
changelog:
  - Remove talloc and tdb dependency (per https://bugzilla.redhat.com/show_bug.cgi?id=453083)
  - Fix deps on chkconfig and service to main pkg (not -common) 
    (per https://bugzilla.redhat.com/show_bug.cgi?id=453083)


author: Andrew Bartlett <abartlet@samba.org> - 0:4.0.0-0.5.alpha5.fc10
changelog:
  - Fix licence tag (the binaries are built into a GPLv3 whole, so the BSD licence need not be mentioned)


author: Matthew Barnes <mbarnes@redhat.com> - 4.0.0-0.7.alpha6.GIT.3508a66
changelog:
  - Disable the winbind subpackage because it conflicts with samba-winbind
    and isn't needed to support OpenChange.


author: Simo Sorce <ssorce@redhat.com> - 4.0.0-7alpha7
changelog:
  - Compile and have separate packages for additional samba libraries
    Package in their own packages: talloc, tdb, tevent, ldb


author: Simo Sorce <ssorce@redhat.com> - 4.0.0-9alpha7
changelog:
  - Make talloc,tdb,tevent,ldb easy to exclude using defines
  - Fix package for non-mock "dirty" systems by deleting additional
    files we are not interested in atm


author: - Andreas Schneider <asn@redhat.com> - 4.0.0-27.rc1
changelog:
  - Fix permission for init scripts.
  - Define a common KRB5CCNAME for smbd and winbind.
  - Set piddir back to /var/run in RHEL6.
  - related: #766333


author: - Andreas Schneider <asn@redhat.com> - 4.0.0-30.rc2
changelog:
  - Fix multilib package installation.
  - resolves: #862047
  - Filter out libsmbclient and libwbclient provides.
  - resolves: #861892
  - Rebase to version 4.0.0rc2.
  - related: #766333


author: - Andreas Schneider <asn@redhat.com> - 4.0.0-41.rc4
changelog:
  - Fix library dependencies found by rpmdiff.
  - Update winbind offline logon patch.
  - related: #766333


author: - Andreas Schneider <asn@redhat.com> - 4.0.0-54.rc4
changelog:
  - Fix summary and description of dc subpackages.
  - resolves: #896142
  - Remove conflicting libsmbclient.7 manpage.
  - resolves: #896240


author: - Andreas Schneider <asn@redhat.com> - 4.0.0-56.rc4
changelog:
  - Fix libwbclient.so.0 symlink.
  - resolves: #882338
  - Fix correct linking of libreplace with cmdline-credentials.
  - resolves: #911264


author: - Andreas Schneider <asn@redhat.com> - 4.0.0-57.rc4
changelog:
  - resolves: #984809 - CVE-2013-4124: DoS via integer overflow when reading
                        an EA list


author: - Andreas Schneider <asn@redhat.com> - 4.0.0-61.rc4
changelog:
  - resolves: #1073356 - Fix CVE-2012-6150.
  - resolves: #1073356 - Fix CVE-2013-4496.
  - resolves: #1073356 - Fix CVE-2013-6442.


author: - Guenther Deschner <gdeschner@redhat.com> - 4.0.0-62.rc4
changelog:
  - resolves: #1105502 - CVE-2014-0244: DoS in nmbd.
  - resolves: #1108843 - CVE-2014-3493: DoS in smbd with unicode path names.
  - resolves: #1105572 - CVE-2014-0178: Uninitialized memory exposure.


author: Andreas Schneider <asn@redhat.com> - 4.0.0-67.rc4
changelog:
  - resolves: #1290708 - CVE-2015-7540
  - related: #1290708 - CVE-2015-5299
  - related: #1290708 - CVE-2015-5296
  - related: #1290708 - CVE-2015-5252
  - related: #1290708 - CVE-2015-5330


author: Sherry Yu <syu@redhat.com> - 0.91
changelog:
  - Naming change from sap_prepare to sap-prepare
  - Detailed log output
  - In function virtrpms: for RHEV Hypervisor, recommend to check SAP Note
    1400911 for setting up host monitoring on RHEV
  - New function check_utilrpms: install utility rpms used in the sap-prepare
    script, e.g. syslinux rpm for gethostid()
  - Add one section Recommendations at the end of the log file, containing
    recommended changes that have to be carried out manually
  - Add a Recommendations section at the end of the log file, for CHECK_ONLY
    mode, that contains the recommended settings
  - Add command-line argument "-h" for Help Message
  - Move java rpms to variable JAVARPMS, as IBM JDK becomes obsolete on Oct. 2012
  - Add global variable VIRTRPMS
  - Remove [-f config] argument in usage - recommended configurations are not to
    be changed
  - In check_fqdn: keep the backup file as
    /etc/sysconfig/network.sap-prepare-<timestamp>
  - In check_security add: if SELINUX=disabled in /etc/sysconfig/selinux, give
    recommendation to set it to Permissive. If SELINUX=permissive but getenforce
    returns 1, setenforce 0. For SELINUX=enforcing, to update the config file,
    keep backup file as /etc/sysconfig/selinux.sap-prepare-<timestamp>; if
    CHECK_ONLY==1, give recommendations
  - Split check_rhn into check_rhn, check_rpms, check_ibmjdk, and check_links
  - Add a variable SAP_NOTE_RHEL6
  - Remove check_users which is not used to keep the script clean
  - Remove variable VERBOSE
  - Rename prepare_environment to check_env, to be consistent with the naming
    convention
  - Move the code of setting kernel parameters from main body to check_env
  - Add SYB_VARS
  - In check_env add the setting of kernel parameters for Sybase
  - In check_ntp ntpdate is removed as ntpd is preferred
  - Remove update_limits_conf because it's no longer needed in RHEL6


author: Sherry Yu <syu@redhat.com> - 0.92
changelog:
  - Changed the name to sapconf
  - Move kernel parameters to /etc/sysconfig/sap, other than /etc/sysctl.conf
  - Add /etc/rc.d/init.d/sapconf and S99sapconf links in /etc/rc2.d, /etc/rc3.d,
    and /etc/rc5.d
  - Removed check_utilrpms() and defined the util rpms as dependency in the rpm
    spec file
  - Removed check_ibmjdk()


author: Frank Danapfel <fdanapfe@redhat.com> - 0.93
changelog:
  - removed /etc/init.d/sapconf service, since this is now done via tuned
  - cleaned up requirements section in spec file
  - added changelog to spec file


author: Frank Danapfel <fdanapfe@redhat.com> - 0.93
changelog:
  - replaced vhostmd with vm-dump-metrics for KVM guest installs
  - re-added function to set user/process limits
  - changed check_ntp to only check if ntpd is running


author: Nils Philippsen <nils@redhat.com> - 0.93-1
changelog:
  - remove obsolete tuned patch
  - fix changelog dates
  - require specific tuned version, prep for upcoming RHEL versions
  - clean up script header
  - don't mess around with SELinux settings, just report
  - use bzipped tarball


author: Nils Philippsen <nils@redhat.com> - 0.95-1
changelog:
  - ignore whitespace and empty lines when checking /etc/hosts
  - use mktemp to create temporary host file
  - add release numbers to changelog entries


author: Jan Grulich <jgrulich@redhat.com> - 0.98-1
changelog:
  - add Man-Page
  - correctly detect VMware virtual guest
  - do not write to /etc/security/limits.conf directly
  - correctly edit /etc/hosts


author: Jan Grulich <jgrulich@redhat.com> - 0.98-5
changelog:
  - add information about KVM to manpage 
    resolves: bz#1123917
  - set correct vm.max_map_count value
    resolves: bz#1168422
  - do not wait for input from keyboard and read from file instead
    resolves: bz#1173861
  - add information about sapconf version
    resolves: bz#1174321


author: Dan Walsh <dwalsh@redhat.com> 2.1.1-3
changelog:
  - Add two new httpd booleans, turned off by default
       * httpd_can_network_relay
       * httpd_can_network_connect_db


author: Dan Walsh <dwalsh@redhat.com> 2.1.2-1
changelog:
  - Update to upstream 
  - Turn off allow_execmem and allow_execmod booleans
  - Add tcpd and automount policies


author: Jeremy Katz <katzj@redhat.com> - 2.1.2-3
changelog:
  - fix requirements to be on the actual packages so that policy can get
    created properly at install time


author: Dan Walsh <dwalsh@redhat.com> 2.1.3-1
changelog:
  - Turn back on execmem since we need it for java, firefox, ooffice
  - Allow gpm to stream socket to itself


author: Dan Walsh <dwalsh@redhat.com> 2.1.6-13
changelog:
  - Add dri libs to textrel_shlib_t
  - Add system_r role for java
  - Add unconfined_exec_t for vncserver
  - Allow slapd to use kerberos


author: Dan Walsh <dwalsh@redhat.com> 2.1.12-3
changelog:
  - Fix for procmail/spamassasin
  - Update to upstream
  - Add rules to allow rpcd to work with unlabeled_networks.


author: Dan Walsh <dwalsh@redhat.com> 2.2.2-1
changelog:
  - Update to upstream
  - Turn off execheap execstack for unconfined users
  - Add mono/wine policy to allow execheap and execstack for them
  - Add execheap for Xdm policy


author: Dan Walsh <dwalsh@redhat.com> 2.2.19-2
changelog:
  - Fix swapon
  - allow httpd_sys_script_t to be entered via a shell
  - Allow httpd_sys_script_t to read eventpolfs


author: Dan Walsh <dwalsh@redhat.com> 2.2.20-1
changelog:
  - Fix load_policy to work on MLS
  - Fix cron_rw_system_pipes for postfix_postdrop_t
  - Allow audotmount to run showmount


author: Dan Walsh <dwalsh@redhat.com> 2.2.23-8
changelog:
  - Blkid changes
  - Allow udev access to usb_device_t
  - Fix post script to create targeted policy config file


author: Dan Walsh <dwalsh@redhat.com> 2.2.23-17
changelog:
  - MLS Fixes
       dmidecode needs mls_file_read_up
  - add ypxfr_t
  - run init needs access to nscd
  - udev needs setuid
  - another xen log file
  - Dontaudit mount getattr proc_kcore_t


author: Dan Walsh <dwalsh@redhat.com> 2.2.29-2
changelog:
  - Add mono dbus support
  - Lots of file_context fixes for textrel_shlib_t in FC5
  - Turn off execmem auditallow since they are filling log files


author: Russell Coker <rcoker@redhat.com> 2.2.29-5
changelog:
  - Fixed mailman with Postfix #183928
  - Allowed semanage to create file_context files.
  - Allowed amanda_t to access inetd_t TCP sockets and allowed amanda_recover_t
    to bind to reserved ports.  #149030
  - Don't allow devpts_t to be associated with tmp_t.
  - Allow hald_t to stat all mountpoints.
  - Added boolean samba_share_nfs to allow smbd_t full access to NFS mounts.
    - Make mount run in mount_t domain from unconfined_t to prevent mislabeling of
    /etc/mtab.
  - Changed the file_contexts to not have a regex before the first ^/[a-z]/
    whenever possible, makes restorecon slightly faster.
  - Correct the label of /etc/named.caching-nameserver.conf
  - Now label /usr/src/kernels/.+/lib(/.*)? as usr_t instead of
    /usr/src(/.*)?/lib(/.*)? - I don't think we need anything else under /usr/src
    hit by this.
  - Granted xen access to /boot, allowed mounting on xend_var_lib_t, and allowed
    xenstored_t rw access to the xen device node.


author: Dan Walsh <dwalsh@redhat.com> 2.2.29-6
changelog:
  - Allow secadm_t ability to relabel all files
  - Allow ftp to search xferlog_t directories
  - Allow mysql to communicate with ldap
  - Allow rsync to bind to rsync_port_t


author: Dan Walsh <dwalsh@redhat.com> 2.2.32-2
changelog:
  - Add unconfined_mount_t
  - Allow privoxy to connect to httpd_cache
  - fix cups labeleing on /var/cache/cups


author: Dan Walsh <dwalsh@redhat.com> 2.3.3-3
changelog:
  - Allow prelink to read bin_t symlink
  - allow xfs to read random devices
  - Change gfs to support xattr


author: Dan Walsh <dwalsh@redhat.com> 2.3.3-11
changelog:
  - Added Paul Howarth patch to only load policy packages shipped 
    with this package
  - Allow pidof from initrc to ptrace higher level domains
  - Allow firstboot to communicate with hal via dbus


author: Dan Walsh <dwalsh@redhat.com> 2.3.6-4
changelog:
  - Change allow_execstack to default to on, for RHEL5 Beta.  
    This is required because of a Java compiler problem.
    Hope to turn off for next beta


author: Dan Walsh <dwalsh@redhat.com> 2.3.9-4
changelog:
  - Set /usr/lib/ia32el/ia32x_loader to unconfined_execmem_exec_t for ia32 platform
  - Fix spec for /dev/adsp


author: Dan Walsh <dwalsh@redhat.com> 2.3.16-9
changelog:
  - Remove bluetooth-helper transition
  - Add selinux_validate for semanage
  - Require new version of libsemanage


author: James Antill <james.antill@redhat.com> 2.4.2-6
changelog:
  - Fix policygentool specfile problem.
  - Allow apache to send signals to it's logging helpers.
  - Resolves: rhbz#212731


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-1
changelog:
  - Dontaudit appending hal_var_lib files 
  Resolves: #217452
  Resolves: #217571
  Resolves: #217611
  Resolves: #217640
  Resolves: #217725


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-3
changelog:
  - Allow login programs to polyinstatiate homedirs
  Resolves: #216184
  - Allow quotacheck to create database files
  Resolves: #212957


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-16
changelog:
  - Allow semanage to exec it self.  Label genhomedircon as semanage_exec_t
  Resolves: #219421
  - Allow sysadm_lpr_t to manage other print spool jobs
  Resolves: #220080


author: Dan Walsh <dwalsh@redhat.com> 2.5.1-1
changelog:
  - Allow prelink when run from rpm to create tmp files
  Resolves: #221865
  - Remove file_context for exportfs
  Resolves: #221181
  - Allow spamassassin to create ~/.spamassissin
  Resolves: #203290
  - Allow ssh access to the krb tickets
  - Allow sshd to change passwd
  - Stop newrole -l from working on non securetty
  Resolves: #200110
  - Fixes to run prelink in MLS machine
  Resolves: #221233
  - Allow spamassassin to read var_lib_t dir
  Resolves: #219234


author: Dan Walsh <dwalsh@redhat.com> 2.5.2-1
changelog:
  - Add ability to generate webadm_t policy
  - Lots of new interfaces for httpd
  - Allow sshd to login as unconfined_t


author: Dan Walsh <dwalsh@redhat.com> 2.5.2-4
changelog:
  - Fix spamassisin so crond can update spam files
  - Fixes to allow kpasswd to work
  - Fixes for bluetooth


author: Dan Walsh <dwalsh@redhat.com> 2.5.2-6
changelog:
  - Allow mozilla, evolution and thunderbird to read dev_random.
  Resolves: #227002
  - Allow spamd to connect to smtp port
  Resolves: #227184
  - Fixes to make ypxfr work
  Resolves: #227237


author: Dan Walsh <dwalsh@redhat.com> 2.5.4-2
changelog:
  - Revert Nemiver change
  - Set sudo as a corecmd so prelink will work,  remove sudoedit mapping, since this will not work, it does not transition.
  - Allow samba to execute useradd


author: Dan Walsh <dwalsh@redhat.com> 2.5.11-6
changelog:
  - Fix hald_acl_t to be able to getattr/setattr on usb devices
  - Dontaudit write to unconfined_pipes for load_policy


author: Dan Walsh <dwalsh@redhat.com> 2.6.4-5
changelog:
  - More fixes for alsactl
  - Transition from hal and modutils
  - Fixes for suspend resume.  
       - insmod domtrans to alsactl
       - insmod writes to hal log


author: Dan Walsh <dwalsh@redhat.com> 3.0.2-7
changelog:
  - Begin adding policy to separate setsebool from semanage
  - Fix xserver.if definition to not break sepolgen.if


author: Dan Walsh <dwalsh@redhat.com> 3.0.8-7
changelog:
  - Allow cupsd_config_t to read/write usb_device_t
  - Support for finger print reader,
  - Many fixes for clvmd
  - dbus starting networkmanager


author: Dan Walsh <dwalsh@redhat.com> 3.0.8-15
changelog:
  - Allow tmpreadper to read man_t
  - Allow racoon to bind to all nodes
  - Fixes for finger print reader


author: Dan Walsh <dwalsh@redhat.com> 3.0.8-28
changelog:
  - Fixes for hald_mac 
  - Treat unconfined_home_dir_t as a home dir
  - dontaudit rhgb writes to fonts and root


author: Dan Walsh <dwalsh@redhat.com> 3.0.8-30
changelog:
  - Allow XServer to read /proc/self/cmdline
  - Fix unconfined cron jobs
  - Allow fetchmail to transition to procmail
  - Fixes for hald_mac
  - Allow system_mail to transition to exim
  - Allow tftpd to upload files
  - Allow xdm to manage unconfined_tmp
  - Allow udef to read alsa config
  - Fix xguest to be able to connect to sound port


author: Dan Walsh <dwalsh@redhat.com> 3.2.5-6
changelog:
  - Fix role transition from unconfined_r to system_r when running rpm
  - Allow unconfined_domains to communicate with user dbus instances


author: Dan Walsh <dwalsh@redhat.com> 3.3.1-5
changelog:
  - Allow nsplugin_config execstack/execmem
  - Allow nsplugin_t to read alsa config
  - Change apache to use user content


author: Dan Walsh <dwalsh@redhat.com> 3.3.1-6
changelog:
  - Prepare policy for beta release
  - Change some of the system domains back to unconfined
  - Turn on some of the booleans


author: Dan Walsh <dwalsh@redhat.com> 3.3.1-15
changelog:
  - Allow init to transition to initrc_t on shell exec.
  - Fix init to be able to sendto init_t.
  - Allow syslog to connect to mysql
  - Allow lvm to manage its own fifo_files
  - Allow bugzilla to use ldap
  - More mls fixes


author: Dan Walsh <dwalsh@redhat.com> 3.3.1-20
changelog:
  - Fix bug in mozilla policy to allow xguest transition
  - This will fix the 

  libsemanage.dbase_llist_query: could not find record value
  libsemanage.dbase_llist_query: could not query record value (No such file or
  directory)
   bug in xguest


author: Dan Walsh <dwalsh@redhat.com> 3.3.1-22
changelog:
  - Allow stunnel to transition to inetd children domains
  - Make unconfined_dbusd_t an unconfined domain


author: Dan Walsh <dwalsh@redhat.com> 3.3.1-27
changelog:
  - Allow nsplugin to read /etc/mozpluggerrc, user_fonts
  - Allow syslog to manage innd logs.
  - Allow procmail to ioctl spamd_exec_t


author: Dan Walsh <dwalsh@redhat.com> 3.3.1-28
changelog:
  - Allow radvd to use fifo_file
  - dontaudit setfiles reading links
  - allow semanage sys_resource
  - add allow_httpd_mod_auth_ntlm_winbind boolean
  - Allow privhome apps including dovecot read on nfs and cifs home 
  dirs if the boolean is set


author: Dan Walsh <dwalsh@redhat.com> 3.3.1-44
changelog:
  - Change unconfined_t to transition to unconfined_mono_t when running mono
  - Change XXX_mono_t to transition to XXX_t when executing bin_t files, so gnome-do will work


author: Dan Walsh <dwalsh@redhat.com> 3.4.1-3
changelog:
  - Dontaudit search of admin_home for init_system_domain
  - Rewrite of xace interfaces
  - Lots of new fs_list_inotify
  - Allow livecd to transition to setfiles_mac


author: Dan Walsh <dwalsh@redhat.com> 3.4.2-7
changelog:
  - Allow confined users to use postgres
  - Allow system_mail_t to exec other mail clients
  - Label mogrel_rails as an apache server


author: Dan Walsh <dwalsh@redhat.com> 3.4.2-12
changelog:
  - Allow amanda to read tape
  - Allow prewikka cgi to use syslog, allow audisp_t to signal cgi
  - Add support for netware file systems


author: Dan Walsh <dwalsh@redhat.com> 3.5.1-1
changelog:
  - Fix xguest -> xguest_mozilla_t -> xguest_openiffice_t
  - Change dhclient to be able to red networkmanager_var_run


author: Dan Walsh <dwalsh@redhat.com> 3.5.1-4
changelog:
  - Consolodate pyzor,spamassassin, razor into one security domain
  - Fix xdm requiring additional perms.


author: Dan Walsh <dwalsh@redhat.com> 3.5.10-1
changelog:
  - Allow NetworkManager to transition to avahi and iptables
  - Allow domains to search other domains keys, coverup kernel bug


author: Dan Walsh <dwalsh@redhat.com> 3.5.13-14
changelog:
  - Additional fixes for cyphesis
  - Fix certmaster file context
  - Add policy for system-config-samba
  - Allow hal to read /var/run/video.rom


author: Dan Walsh <dwalsh@redhat.com> 3.6.12-6
changelog:
  - Allow cupsd_t to create link files in print_spool_t
  - Fix iscsi_stream_connect typo
  - Fix labeling on /etc/acpi/actions
  - Don't reinstall unconfine and unconfineuser on upgrade if they are not installed


author: Dan Walsh <dwalsh@redhat.com> 3.6.12-19
changelog:
  - Allow initrc_t to delete dev_null
  - Allow readahead to configure auditing
  - Fix milter policy
  - Add /var/lib/readahead


author: Dan Walsh <dwalsh@redhat.com> 3.6.12-20
changelog:
  - Fix labeling on /var/lib/misc/prelink*
  - Allow xserver to rw_shm_perms with all x_clients
  - Allow prelink to execute files in the users home directory


author: Dan Walsh <dwalsh@redhat.com> 3.6.12-21
changelog:
  - Allow confined users to manage virt_content_t, since this is home dir content
  - Allow all domains to read rpm_script_tmp_t which is what shell creates on redirection


author: Dan Walsh <dwalsh@redhat.com> 3.6.12-27
changelog:
  - Fix /sbin/ip6tables-save context
  - Allod udev to transition to mount
  - Fix loading of mls policy file


author: Dan Walsh <dwalsh@redhat.com> 3.6.13-3
changelog:
  - Add fish as a shell
  - Allow fprintd to list usbfs_t
  - Allow consolekit to search mountpoints
  - Add proper labeling for shorewall


author: Dan Walsh <dwalsh@redhat.com> 3.6.25-1
changelog:
  - Fix polkit label
  - Remove hidebrokensymptoms for nss_ldap fix
  - Add modemmanager policy
  - Lots of merges from upstream
  - Begin removing textrel_shlib_t labels, from fixed libraries


author: Dan Walsh <dwalsh@redhat.com> 3.6.31-4
changelog:
  - Fix devicekit_disk_t to getattr on all domains sockets and fifo_files
  - Conflicts seedit (You can not use selinux-policy-targeted and seedit at the same time.)


author: Dan Walsh <dwalsh@redhat.com> 3.6.31-5
changelog:
  - Fix label on /usr/bin/notepad, /usr/sbin/vboxadd-service
  - Remove policycoreutils-python requirement except for minimum


author: Dan Walsh <dwalsh@redhat.com> 3.6.32-13
changelog:
  - Allow cupsd_config to read user tmp
  - Allow snmpd_t to signal itself
  - Allow sysstat_t to makedir in sysstat_log_t


author: Dan Walsh <dwalsh@redhat.com> 3.7.7-1
changelog:
  - Move users file to selection by spec file.
  - Allow vncserver to run as unconfined_u:unconfined_r:unconfined_t


author: Dan Walsh <dwalsh@redhat.com> 3.7.8-3
changelog:
  - Allow abrt_helper to getattr on all filesystems
  - Add label for /opt/real/RealPlayer/plugins/oggfformat\.so


author: Dan Walsh <dwalsh@redhat.com> 3.7.10-4
changelog:
  - Change allow_execstack and allow_execmem booleans to on
  - dontaudit acct using console
  - Add label for fping
  - Allow tmpreaper to delete sandbox_file_t
  - Fix wine dontaudit mmap_zero
  - Allow abrt to read var_t symlinks


author: Dan Walsh <dwalsh@redhat.com> 3.7.10-5
changelog:
  - Add MLS fixes found in RHEL6 testing
  - Allow domains to append to rpm_tmp_t
  - Add cachefilesfd policy
  - Dontaudit leaks when transitioning


author: Dan Walsh <dwalsh@redhat.com> 3.7.11-1
changelog:
  - Update to upstream - These are merges of my patches
  - Remove 389 labeling conflicts
  - Add MLS fixes found in RHEL6 testing
  - Allow pulseaudio to run as a service
  - Add label for mssql and allow apache to connect to this database port if boolean set
  - Dontaudit searches of debugfs mount point
  - Allow policykit_auth to send signals to itself
  - Allow modcluster to call getpwnam
  - Allow swat to signal winbind
  - Allow usbmux to run as a system role
  - Allow svirt to create and use devpts


author: Dan Walsh <dwalsh@redhat.com> 3.7.13-4
changelog:
  - Allow users to dbus chat with xdm
  - Allow users to r/w wireless_device_t
  - Dontaudit reading of process states by ipsec_mgmt


author: Dan Walsh <dwalsh@redhat.com> 3.7.14-2
changelog:
  - Dontaudit ipsec_mgmt sys_ptrace
  - Allow at to mail its spool files
  - Allow nsplugin to search in .pulse directory


author: Dan Walsh <dwalsh@redhat.com> 3.7.15-4
changelog:
  - Add label for /var/lib/upower
  - Allow logrotate to run sssd
  - dontaudit readahead on tmpfs blk files
  - Allow tmpreaper to setattr on sandbox files
  - Allow confined users to execute dos files
  - Allow sysadm_t to kill processes running within its clearance
  - Add accountsd policy
  - Fixes for corosync policy
  - Fixes from crontab policy
  - Allow svirt to manage svirt_image_t chr files
  - Fixes for qdisk policy
  - Fixes for sssd policy
  - Fixes for newrole policy


author: Dan Walsh <dwalsh@redhat.com> 3.7.16-1
changelog:
  - Update to upstream
  - Allow tmpreaper to delete sandbox sock files
  - Allow chrome-sandbox_t to use /dev/zero, and dontaudit getattr file systems
  - Fixes for gitosis
  - No transition on livecd to passwd or chfn
  - Fixes for denyhosts


author: Dan Walsh <dwalsh@redhat.com> 3.7.16-2
changelog:
  - Fix ~/.fontconfig label
  - Add /root/.cert label
  - Allow reading of the fixed_file_disk_t:lnk_file if you can read file
  - Allow qemu_exec_t as an entrypoint to svirt_t


author: Dan Walsh <dwalsh@redhat.com> 3.7.17-3
changelog:
  - Fix cgroup handling adding policy for /cgroup
  - Allow confined users to write to generic usb devices, if user_rw_noexattrfile boolean set


author: Dan Walsh <dwalsh@redhat.com> 3.7.17-4
changelog:
  - Fix /cgroup file context 
  - Fix broken afs use of unlabled_t
  - Allow getty to use the console for s390


author: Dan Walsh <dwalsh@redhat.com> 3.7.17-6
changelog:
  - Fix allow_httpd_mod_auth_pam to use 	auth_use_pam(httpd_t)
  - Allow accountsd to read shadow file
  - Allow apache to send audit messages when using pam
  - Allow asterisk to bind and connect to sip tcp ports
  - Fixes for dovecot 2.0
  - Allow initrc_t to setattr on milter directories
  - Add procmail_home_t for .procmailrc file


author: Dan Walsh <dwalsh@redhat.com> 3.7.18-1
changelog:
  - Update to upstream
  - Fix label for  /opt/google/chrome/chrome-sandbox
  - Allow modemmanager to dbus with policykit


author: Dan Walsh <dwalsh@redhat.com> 3.7.18-3
changelog:
  - Allow ipsec_t to create /etc/resolv.conf with the correct label
  - Fix reserved port destination
  - Allow autofs to transition to showmount
  - Stop crashing tuned


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-1
changelog:
  - Update to upstream
  - Allow abrt to delete sosreport
  Resolves: #579998
  - Allow snmp to setuid and gid
  Resolves: #582155
  - Allow smartd to use generic scsi devices
  Resolves: #582145


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-3
changelog:
  - Fix label on /root/.rhosts
  Resolves: #582760
  - Add labels for Picasa
  - Allow openvpn to read home certs
  - Allow plymouthd_t to use tty_device_t
  - Run ncftool as iptables_t
  - Allow mount to unmount unlabeled_t
  - Dontaudit hal leaks


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-5
changelog:
  - Allow rlogind_t to search /root for .rhosts
  Resolves: #582760
  - Fix path for cached_var_t
  - Fix prelink paths /var/lib/prelink	
  - Allow confined users to direct_dri
  - Allow mls lvm/cryptosetup to work


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-6
changelog:
  - Allow initrc_t to read slapd_db_t
  Resolves: #585476
  - Allow ipsec_mgmt to use unallocated devpts and to create /etc/resolv.conf
  Resolves: #585963


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-11
changelog:
  - Fix location of oddjob_mkhomedir
  Resolves: #587385
  - fix labeling on /root/.shosts and ~/.shosts
  - Allow ipsec_mgmt_t to manage net_conf_t
  Resolves: #586760


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-12
changelog:
  - Allow initrc_t to remove dhcpc_state_t
  - Fix label on sa-update.cron
  - Allow dhcpc to restart chrony initrc
  - Don't allow sandbox to send signals to its parent processes
  - Fix transition from unconfined_t -> unconfined_mount_t -> rpcd_t
  Resolves: #589136


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-14
changelog:
  - Fixes for sandbox_x_net_t  to match access for sandbox_web_t ++
  - Add xdm_etc_t for /etc/gdm directory, allow accountsd to manage this directory
  - Add dontaudit interface for bluetooth dbus
  - Add chronyd_read_keys, append_keys for initrc_t
  - Add log support for ksmtuned
  Resolves: #586663


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-15
changelog:
  - Allow gdm to edit ~/.gconf dir
  Resolves: #590677
  - Allow dovecot to create directories in /var/lib/dovecot
  Partially resolves 590224
  - Allow avahi to dbus chat with NetworkManager
  - Fix cobbler labels
  - Dontaudit iceauth_t leaks
  - fix /var/lib/lxdm file context
  - Allow aiccu to use tun tap devices
  - Dontaudit shutdown using xserver.log


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-16
changelog:
  - Allow xm_t to read network state and get and set capabilities
  - Allow policykit to getattr all processes
  - Allow denyhosts to connect to tcp port 9911
  - Allow pyranha to use raw ip sockets and ptrace itself
  - Allow unconfined_execmem_t and gconfsd mechanism to dbus
  - Allow staff to kill ping process
  - Add additional MLS rules


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-17
changelog:
  - Fix path for /var/spool/abrt
  - Allow nfs_t as an entrypoint for http_sys_script_t
  - Add policy for piranha
  - Lots of fixes for sosreport


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-19
changelog:
  - Add labels for /sys
  - Allow sshd to getattr on shutdown
  - Fixes for munin
  - Allow sssd to use the kernel key ring
  - Allow tor to send syslog messages
  - Allow iptabels to read usr files
  - allow policykit to read all domains state


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-20
changelog:
  - Allow mount to r/w abrt fifo file
  - Allow svirt_t to getattr on hugetlbfs
  - Allow abrt to create a directory under /var/spool


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-21
changelog:
  - Allow login programs to read krb5_home_t
  Resolves: 594833
  - Add obsoletes for cachefilesfd-selinux package
  Resolves: #575084


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-22
changelog:
  - Allow procmail to execute scripts in the users home dir that are labeled home_bin_t
  - Fix /var/run/abrtd.lock label


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-23
changelog:
  - Add cmirrord policy
  - Fixes for accountsd policy
  - Fixes for boinc policy
  - Allow cups-pdf to set attributes on fonts cache directory
  - Allow radiusd to setrlimit
  - Allow nscd sys_ptrace capability


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-24
changelog:
  - Add support for /dev/vhost-net
  - Allow psad to read files in /usr
  - Allow systat to use nscd socket
  - Fixes for boinc policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-25
changelog:
  - Fixes for cmirrord policy
  - Dontaudit xauth to list inotifyfs filesystem.
  - Allow xserver to translate contexts.
  - Allow kdumpgui domain sys_admin capability
  - Allow vpnc to relabelfrom tun_socket
  - Allow prelink_cron_system_t to signal
  - Fixes for gitolite
  - Allow virt domain to read symbolic links in device directories


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-26
changelog:
  - Allow krb5kdc to write krb5kdc_principal_t file
  - Allow hald to send generic signal to dhcp client
  - Fix dev_rw_vhost interface
  - Add /var/run/abrt.socket label


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-27
changelog:
  - Allow ftpd ipc_lock capability
  - Allow audisp-remote to getcap and setcap
  - Allow iscsid to read and write raw memory devices
  - Fixes for bitlbee policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-30
changelog:
  - Allow sysadm to run ncftool
  - Fixes for cobbler policy
  - Allow Network Manager to transition to ipsec_mgmt domain
  - Add label for /usr/libexec/nm-openswan-service
  - Add label for /dev


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-31
changelog:
  - Remove daemons dontaudit to search all dirs 
  - Add support for epylog
  - All all domains to read lib files
  - Allow denyhosts to send syslog messages
  - Allow mysql-safe setrlimit
  - Allow rpm to execute rpm_tmp_t
  - Allow dmesg to appen abrt_var_cache files
  - Fixed label for abrt.socket


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-32
changelog:
  - Allow sectool to connect to users over unix stream socket
  - Add label for /var/spool/abrt-upload
  - Add audio_home_t type for homedir/Music files
  - Allow aiccu to read network config files
  - Allow qpidd to setsched
  - Allow virt domains to manage svirt_image_t fifo files
  - Fixes for NM-openswan
  - Fixes for admin interfaces


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-36
changelog:
  - Allow netutils to read and write USB monitor devices
  - Fix label for /rhev
  - Add user_setrlimit boolean
  - Allow initrc to manage virt lib files
  - Add support for ebtables
  - Add label for /bin/mksh
  - Dontaudit aiccu sys_tty_config capability
  - Add httpd_setrlimit boolean


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-37
changelog:
  - Redefine hi_reserved_port_t to include ports from 512 to 599 
  - Add label for /sbin/sushell
  - Fixes for munin plugin policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-38
changelog:
  - Allow xdm_t to manage gnome homedir content
  - Allow s-c-firewall to read and write virtual memory sysctls
  - Fixes for logwatch policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-39
changelog:
  - Allow munin_system_plugin to read files in /usr
  - Do not audit insmod attempts to write virt daemon unnamed pipes
  - Allow corosync to read ricci lib files


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-40
changelog:
  - Fixes for puppetmaster
  - Fix label for kadmin init script
  - Fixes for logwatch-mail policy
  - Allow arpwatch to request the kernel to load modules
  - Allow cron jobs to run with context of user that started them


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-41
changelog:
  - Allow logwatch_mail to read read the networking state information.
  - Add label for /usr/bin/dosbox
  - Allow systat sys_admin capability


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-42
changelog:
  - Allow kdump to read information from the debugging filesystem
  - Update boinc policy
  - Fixes for logwatch-mail policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-43
changelog:
  - Allow ncftool to run brctl
  - Fixes for ricci-modclusterd policy
  - Allow uucpd to execute ssh client
  - Add label for dayplanner
  - Allow sandbox_xserver execstack


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-45
changelog:
  - Fixes for cgroup policy
  - Fixes for ncftool policy
  - Add ncftool_read_user_content boolean
  - Fix label for boinc init script
  - Fix label for fence_tool
  - Allow vhostmd to write virt content
  - Allow ricci domtrans ot shutdown


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-47
changelog:
  - Fixes for boinc-project policy
  - Allow swat to read nmbd pid file
  - Allow fail2ban to read BIND log files
  - Fix cert handling from Dan 
  - Remove transition from unconfined to ncftool domain


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-48
changelog:
  - Fixes for shorewall policy
  - Allow sssd chown capability
  - Fix label for /usr/bin/mutter
  - Label dead.letter as mail_home_t
  - Allow pcscd to read  hardware state information 
  - Fixes for ulogd policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-49
changelog:
  - Add label for /var/cache/rpcbind directory
  - Add chrome_role for xguest
  - Fix amavis_read_spool_files interface


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-55
changelog:
  - Add cluster_var_lib_t type and label for /var/lib/cluster
  - Add labeling for /root/.debug
  - Remove permissive from cmirrord domain
  - Dontaudit cmirrord_t sys_tty_config capability
  - Allow virtd to read from processes up to its clearance
  - Allow dovecot-deliver to create tmp files
  - Allow tor to send signals to itself
  - Handle /var/db/sudo
  - Remove allow_corosync_rw_tmpfs boolean
  Resolves: #631564


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-56
changelog:
  - Allow smartd to read usr files
  - Allow devicekit-power transition to dhcpc
  - Add label for /etc/timezone
  - Remove transition from unconfined_t to iptables_t
  - Allow domains with different mcs levels to send each other signals as long as they are not identified as mcsconstrainproc
  Resolves: #634945
  - Allow nrpe to send signal and sigkill to the plugins
  - Fix up xguest to allow it to read hwdata and gconf_etc_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-57
changelog:
  - Allow system_mail_t to append ~/dead.letter
  - Allow mount to communicate with gfs_controld
  Resolves: #636683
  - Dontaudit hal leaks in setfiles
  - gpm needs to use the user terminal


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-58
changelog:
  - Fix httpd_setrlimit boolean to allow sys_resource capability
  - Fix label for ip6tables.save
  - Allow ssh_t to exec ssh_exec_t
  - Dontaudit init leaks
  Resolves: #639083


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-59
changelog:
  - Allow cdrecord setrlimiit
  Resolves: #615731
  - Define debugfs_t as mountpoint
  Resolves: #646856
  - Fix fenced_can_network_connect boolean description
  Resolves: #650136
  - Add label for /var/run/faillock
  - Add dirsrv and dirsrv-admin policy
  Resolves: #655206
  - Fixes for cobbler policy
  - Allow certmonger to manage dirsrv config
  Resolves: #658591


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-60
changelog:
  - Fixes for certmonger
  - Backport passenger policy
  - Allow run_init to read console_device
  Resolves: #657568
  - Add label for /var/lib/dkim-milter
  - Fixes for munin policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-61
changelog:
  - Fixes for passenger policy
  - Allow user_t to conditionally transition to ping_t and traceroute_t
  Resolves: #663054


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-64
changelog:
  - Add namespace policy
  - Allow udev to stream connect to init
  Resolves: #667370
  - Update for screen policy to handle pipe in homedir
  - Fixes for polyinstatiated homedir


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-69
changelog:
  - Make Spacewalk to work with selinux-policy
  Resolves: #673112
  - Fix /root/.ssh labeling
  Resolves: #637109	
  - Fix for the spec file


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-71
changelog:
  - Allow cmirrord to create physical disk devices in /dev
  - Allow cluster domains to use the system bus and send each other dbus messages
  - Add label for /dev/tgt


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-74
changelog:
  - Add virt_home_ type files located in ~/.libvirt directory
  - virt creates monitor sockets in the users home dir
  - Allow lvm setfscreate
  Resolves: #680388
  - Make lsusb and lsblk working on MLS
  Resolves: #680426


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-75
changelog:
  - Allow svirt to manage sock_file in ~/.libvirt directory
  - Allow sysamd to run udev in udev_t domain
  - Remove capability from svirt
  - Add lvm_exec_t label for kpartx


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-76
changelog:
  - Fixes for ssh_keygen policy
  - Allow sysadm_t to run ssh-keygen in ssh_keygen_t domain
  - Backport spice vdagent policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-79
changelog:
  - Fixes for sandbox/seunshare policy 
  Resolves:#684919
  - Allow ssh_keygen_t dac_override
  - Add matahari policy 
  - Add label for /etc/securetty 
  - Fixes for pirahna-pulse policy
  - Fixes for radius, samba, dirsrv, kerberos policies 
  - Allow console login on MLS
  - Fix file context to show several labels as SystemHigh
  - Add port definition for dogtag, matahari, movaz ports


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-80
changelog:
  - Add support for a new cluster service - foghorn
  - sssd needs to read ~/.k5login in nfs, cifs or fusefs file systems
  - sssd wants to read .k5login file in users homedir
  - Add support for vdsm
  - Allow syslogd setrlimit, sys_nice
  Resolves: #689431
  - ipsec_mgmt_t wants to cause ipsec_t to dump core, needs to be allowed


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-81
changelog:
  - Add allow_sysadm_manage_security boolean
  - Add label for /dev/dlm.*
  - Allow auditadm_screen_t and secadm_screen_t dac_override capability
  - SSH_USE_STRONG_RNG is 1 which requires /dev/random
  - Fix auth_rw_faillog definition
  - Fixes for nslcd policy
  Resolves: #693368
  - Allow qpidd to manage pid and lib matahari files
  - Allow rgmanager to send the kill signal to all users


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-83
changelog:
  - Add label for matahari-broker.pid file
  - Allow foghor to read snmp lib files
  - Make sysadm security admin
  - Fix ssh_sysadm_login boolean
  Resolves: #694551


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-87
changelog:
  - Allow $1_sudo_t to read default SELinux context
  - Allow tgtd to create a sock file
  - Allow initrc_t to manage faillock


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-95
changelog:
  - Allow secadm to manage selinux config files
  - Allow apache to use jboss management port
  - Add fenced_can_ssh boolean


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-97
changelog:
  - Allow postfix-pickup to write files and directories regardless of their MCS category set.
  - Make xinetd trusted to write outbound packets regardless of the network's or node's MLS range
  Resolves: #705772


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-104
changelog:
  - Allow puppet to Check access to the passwd executable
  - Add label for /var/www/html/logs directory
  - Add label for /var/lib/squeezeboxserver directory
  - Allow rgmanager executes init script files in initrc_t domain which ensure proper transitions


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-107
changelog:
  - Make new domains as unconfined
  - Add abrt_handle_event_t domain for ABRT event script
  - Add selinux_mysql man page
  - Fix httpd selinux man page
  - Fix interfaces


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-108
changelog:
  - Add squid man page
  - Add git man page
  - Make puppet working with passenger
  - Allow procmail to execute hostname command


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-110
changelog:
  - Add label for passwd.adjunct
  - Allow pulse to execute  /usr/sbin/fos
  - Fix labeling for passenger
  - Add selinux policy support for IP-in-SSH tunnelling
  - Allow sulogin to write /dev/pts/0 in single user mode


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-111
changelog:
  - Add git_cgit_read_gitosis_content boolean
  - Add support for cma port
  - Add virt_use_sanlock boolean and make sanlock working together libvirt
  - Make passenger and puppet working together


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-112
changelog:
  - Fix description of allow_* booleans
  - Allow sanlock to manage libvirt lib files
  - Fix bug in lsassd policy
  - Add label for /var/run/luci
  - move port 18001 from http_port_t to jboss_management_port_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-114
changelog:
  - Fix httpd_selinux man page
  - Add corenet_packet() interface
  - Add support for Clustered Samba commands


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-115
changelog:
  - Add unlabelednet policy module
  - Add chrome role for xguest
  - Fix for vdagent policy
  - Add fix to allow confined apps to execmod on chrome


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-118
changelog:
  - Fix label for /root/.hushlogin
  - Allow domain to send/recv unlabeled packet
  - Allow sshd to relabel tun socket
  - Allow puppetmasterd to relabel puppet config files
  - Add label for lvs.conf
  - Fix labeling for matahari-netd agents


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-123
changelog:
  - MLS Overrides needed for a user running at a level to be able to use sudo and talk to sssd
  - Allow initrc_t to manage dirsrv pid files with disabled unconfined module
  - Fixed for deltacloudd policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-125
changelog:
  - Change the postinstall to load_policy separately from the semodule command
  - This will put the proper files in place even if the kernel rejects the policy.
  - Allow login programs to connect to the pki_ca_port
  - Allow vhostmd to read /dev/rand and signal


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-128
changelog:
  - Add cronjob_role for sysadm
  - Change label for /var/spool/cron
  - Add interface to allow exec of mongod


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-131
changelog:
  - Fixes for rhev policy
  - Make ssh-keygen as unconfined domain
  - Add sanlock_use_nfs boolean
  - Add ssh_dontaudit_search_user_home_dir interface
  - namespace_init and MLS fix


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-132
changelog:
  - Fixes for nagios policy
  - Add a new interface for libra
  - Fix spec file to be testing SELinux status correctly


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-134
changelog:
  - Backport ABRT policy
  - Backport matahari policy
  - Add interfaces for libra
  - Add jboss_dubeg port definition


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-135
changelog:
  - Add fixes for qpidd policy, support for tmpfs_t
  Resolves:#769352
  - Add fixes for mcelog policy, for new location of pid,sock files
  - Make sendmail and postfix working together


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-136
changelog:
  - backport mozilla_plugin policy
  - backport sandbox policy to support nacl
  - Add support for selinux_avcstat munin plugin
  - Treat hearbeat with corosync policy
  - Allow system cronjobs to read kernel network state
  - Allow corosync to read and write to qpidd shared memory
  - More fixes for qpidd
  Resolves:#769352
  - Add policy for quota-nld


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-137
changelog:
  - Remove nfs_* booleans because nfs runs in kernel_t domain
  Resolves:#760405
  - Add httpd_manage_ipa boolean
  - Dontaudit sys_ptrace for matahari-netd
  - Allow vhostmd to getattr on virtd
  - Allow snmpd to connect to the ricci_modcluster
  - qpidd should be allowed to connect to the amqp port


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-138
changelog:
  - Add new policy for cfengine
  - Add new policy for sge gridengine jobs
  - Add support for nagios eventhandlers
  - Make system cron jobs run in the proper domain
  - Add policy to support privsep ssh process running in user domain
  - Add fixes relates to nss/FIPS
  - Add new rsync_use_* booleans
  - Allow qpidd to connect to matahari ports
  - Allow sysadm_u to read system_r in MLS
  - Remove razor labeling because we treat razor with spam policy
  - Add support for matahari-qmf-sysconfig-consoled, clean up matahari policy
  - Fixes for interfaces
  Resolves:#791294
  Resolves:#796351


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-139
changelog:
  - Allow nfsd_t to getattr on all fs
  Resolves:#738628
  - Make mailx working together with cron without unconfined module
  - Allow sssd sys_resource capability


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-140
changelog:
  - Add additional fixes for nagios handlers
  Resolves:#749311
  - Add 7600 and 4447 as jboss_management ports


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-141
changelog:
  - Add man pages for apps, services
  - Allow nagios to use user terminals
  Resolves:#782325
  - Add support for unconfined certmonger scripts
  - Add support for matahari-qmf-rpcd service
  - Allow chsh to use PAM
  - Allow rpc.statd to execute sm-notify which has bin_t label
  - Make sure files which are created by /usr/bin/R get proper label in home directories


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-142
changelog:
  - Fixes for man pages
  - Allow rpcd to execute sm-notify
  Resolves:#802247
  - Add support for matahari-qmf-rpcd
  - Add support matahari vios-proxy-* apps
  - Allow quota-check to create files on nonxattr filesystems
  - Add support for ~/Maildir
  - Allow unconfined dyntransition
  - Fixes for certmonger_unconfined and certmonger
  - Fixes for certmonger policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-144
changelog:
  - Fixes for cfengine policy
    * changed labeling for /var/cfengine/outputs from var_log to cfengine_var_log_t
    * re-arranged policy to use template and cfengine_domain 
  - Allow dovecot to domtrans sendmail to handle sieve scripts
  - Bacport libvirt-qmf policy for Fedora
  - Remove labeling for postmaster.pid file 
  - Fix for virtual network which looses network connection
  - Add man pages for SELinux users
  - cgconfig needs to use getpw calls
  - Allow lvm and fsadm to write sysfs_t
  - Allow rpc.mounted to list user tmp files
  - Fix permissivedomains declarations
  Resolves:#806220
  - Fix spec file to instal minimum policy properly


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-146
changelog:
  - Add sysadm_secadm policy module to separate in secadm_r, sysadm_r
  Resolves:#787413
  - Fixes for libvirt-qmf
  - Add label for package-cleanup 
  - Add support for zfs
  - Make cfengine domains as unconfined
  Resolves:#753184
  - Allow sshd_t to dyntransition to sysadm_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-147
changelog:
  - Fix man pages for SELinux users
  - Allow all user domains to setexec
  - Allow cobblerd to get SELinux status and booleans
  - Add labeling for /etc/zipl.conf
  Resolves:#813803
  - Allow fenced to read SNMP lib files


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-149
changelog:
  - Add labeling for /usr/sbin/matahari-dbus-sysconfigd
  - Add additional labeling for zarafa
  - Allow guest_t to fix labeling
  - Corenet_tcp_bind_all_unreserved_ports(ssh_t) should be called with the user_tcp_server boolean
  - squashfs does not support xattr in RHEL6
  Resolves:#815898
  - Remove pyzor labeling and move it to spamassassin.fc
  - Fix config.tgz


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-151
changelog:
  - Add openstack-nova, openstack-keystone, openstack-glance, openstack-quantum policies
  - Allow sysadm_t to create other crontabs
  - Allow nfsd_t to read defaul_t link files
  - Fix labeling for /var/run/heartbeat
  - Fixes for admin_template() interface to make sysadm_secadm.pp module working correctly
  - More fixes for condor policy
  - Allow chfn_t to creat user_tmp_files
  - Allow chfn_t to execute bin_t
  - Fix auth_role() interface
  - Fixes to make privsep+SELinux working if we try to use chage to change passwd


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-152
changelog:
  - Add label for condor_starter
  Resolves:#807682
  - Dontaudit sys_module for brctl
  - Allow winbind to send signull to smbd
  - Add jacorb port definition


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-154
changelog:
  - Allow fenced to manage snmpd lib files
  - Allow certmonger to get attributes on init script files
  Resolves:#790967
  - Fix labeling for Firefox plugins
  Resolves:#747993
  - Add mta_signal_user_agent() interface


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-155
changelog:
  - Allow setroubleshootd to execute rpm
  Resolves:#833053
  - Add labeling for /usr/lib/flash-plugin/libflashplayer.so


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-156
changelog:
  - Allow user to login using ssh with random MLS range
  Resolves:#837815
  - Allow virtd_t to create mtab with the proper labeling
  - Add support for check_icmp nagios plugin
  - Make chkconfig working on MLS for sysadm_t
  - Allow dovecot to manage mail_home_rw_t
  - Add support for fsav
  - Allow clamscan to use amavisd-new
  - Add support for rhnsd


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-157
changelog:
  - Allow procmail to manage mail home data
  - We should only block MCS node_bind on mcsuntrustedproc
  - Fixes for amavis
  Resolves:#837815


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-159
changelog:
  - Allow munin_stats to read munin logs
  - Allow updpwd to write all MLS levels
  - Make piranha_web_t as nsswitch domain
  - Allow munin mail plugins to read exim log files
  - Backport sanlock policy from Fedora
  Resolves:#831908
  - Allos dac_override, sys_nice for sasl
  - Add labeling for /var/named/chroot/usr/lib64
  - Add support for gitolite3
  - Allow confined users to send mail


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-160
changelog:
  - Add named_bind_http_port boolean
  - Add port definition for 8953/tcp
  - spice-vdagent(d)'s are going to log over to syslog
  - Fix labeling for /usr/sbin/rpc.* binaries to label them as rpcd_exec_t
  - Add sensord policy
  - Allow oddjob_mkhomedir to write on nfs share
  - Add virt_bridgehelper policy
  - Allow clamd to write/delete own pid file with clamd_var_run_t label
  - Add support for wdmd tmpfs
  - Add initrc_domain attribute 
  - Add bcfg2 policy
  - Modify ssh_chroot_rw_homedirs boolean to allow manage apache system r/w content if for /var/www as home
  - Add pacemaker policy
  - Allow snmpd to connect to corosync over unix stream socket
  - Allow crontab to read NFS
  - Add new type selinux_login_config_t for /etc/selinux/TYPE/logins directory and allow sssd to manage files in this directory
  Resolves:#843814
  - Add labeling for /opt/sartest directory
  - Add initrc_domain attribute to allow domains to work as initrc_t domain
  - heartbeat should be running as rgmanager_t instead of corosync_t
  - Add glusterd policy
  - Add l2tpd policy
  - Add numad policy
  Resolves:#801493


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-162
changelog:
  - Add pkcslotd policy
  Resolves:#851483
  - Allow cyrus-imapd init script to write cyrus data
  - Fix labeling for /dev/twa


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-166
changelog:
  - More fixes for openshift and add support for opeshift labeling instead of stickshift
  - /etc/selinux/<type>/logins should be owned by the policy package
  Resolves:#855889
  - Add labeling for /var/tmp/DNS_25      
  - Allow postfix_local_t to execute files on nfs_t
  - Add fixes for kadmind
  - Add rhnsd policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-167
changelog:
  - Allow postfix_locat to search stickshift lib files
  - Dontaudit sys_ptrace cap for httpd if httpd_stickshift is on
  - Allow openshift domains change process identity
  - SELinux is reporting that openshift domains are trying to write into their proc directories
  Resolves:#855889


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-168
changelog:
  - Add support for HTTPProxy* in /etc/freshclam.conf
  - pppd wants to read /usr/share/radiusclient-ng/dictionary
  - Add ssh_chroot_manage_apache_content and ssh_chroot_full_access booleans
  - snmp wants to also manage snmp dirs for amavisd-snmp support
  - Add labeling for virsh_fenced
  - Allow nmbd_t to crate dirs with samba_var_t labeling
  - Add clamscan_can_scan_system boolean
  - Allow all domains to getattr on prelink_exec_t
  - Add postgresql_can_rsync boolean
  - Allow pulse to domain transition to iptables
  - Allow nslcd sys_nice capability
  - Allow corosync to connect to saphostctrl ports
  - Allow passwd to read generic /tmp dirs
  - Add policy for qemu-qa
  - Add new antivirus policy module for antivirus programs
  Resolves:#838260


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-169
changelog:
  - Fix spec file to silent restorecon errors on files which do not exist
  - Fix passenger backport
  Resolves:#839831


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-172
changelog:
  - Update httpd_runstickshift boolean
  - Remove transition from sysadm_t to fsadm_t
  Resolves:#852763
  - Make vmware-host as unconfined domain
  - Allow all domains to read usr_t
  - Fix labeling for all log files


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-173
changelog:
  - syslogd_t now support kerberos
  Resolves:#867001
  - Fix openshift labeling for binaries
  - Allow passwd to read usr_t links/files
  - Add labeling for /var/lib/sss/mc


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-174
changelog:
  - openshift user domains wants to r/w ssh tcp sockets
  - Allow mount to relabelfrom unlabeled file systems
  - Additional fix for syslog/kerberos
  Resolves:#867001


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-175
changelog:
  - Add initial openswitch policy. Domains are unconfined
  Resolves:#845417
  - Add labeling for /usr/sbin/mcollectived
  - Allow openshift domains to read /dev/urandom


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-177
changelog:
  - Allow dnsmasq to manage virt run files
  Resolves:#843543
  - Allow setroubleshootd to read /proc/irq
  - Backport fixes for virt_use_* booleans
  - Allow qemu-ga to use ttyS0
  - Allow dhcpc to manage dhclient-eth0.pid labeled as virt_var_run_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-178
changelog:
  - Fix labeling for OpenShift binaries
  - Add samba_portmapper boolean and labeling for /var/run/samba
  Resolves:#871816
  - Backport dspam policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-180
changelog:
  - Allow openshift domains to execute tmux
  - Allow wdmd to getattr on tmpfs_t
  Resolves:#831908
  - Add labeling for /var/nmbd/unexpected
  - Allow winbind to create samba pid dir
  - Dontaudit write access on /var/lib/net-snmp/mib_indexes for syslogd
  - Fenced communicates with libvirt
  - Fix labeling for libflashplayer.so
  - Add labeling for /var/lib/zarafa-webapp
  - Allow dspam to read localization
  - Add labeling for Z-Push
  - Allow rpc.svcgssd to search nfsd_fs_t dirs
  - Allo cgred to read all sysctl


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-181
changelog:
  - Allow kdumpgui to read/write to zipl.conf
  Resolves:#877108
  - Add /proc/numactl support for confined users
  - Make proc_numa_t an MLS Trusted Object
  - Make ccs_tool and cman_tool labeled as rgmanager_exec_t
  - Fix cron_admin_role interface
  - Add support for opendkim


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-182
changelog:
  - Fix labeling for /var/named/chroot/usr/lib
  Resolves:#843732
  - Allow amavis to stream connect to snmpd
  Resolves:#839250
  - Additional fixes for log files related to logrotate
  - Allow all domains to read base etc_t file type
  - Allow logrotate to list root home directory
  - Fix labeling for /var/log/z-push
  - Allow cyrus init scriptu to manage cyrus data files
  - Dontaudit leaks of locks or generic log files to systemprocesses
  - Allow ricci-modrpm to send syslog msgs
  - Allow munin to have kill capability


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-184
changelog:
  - Add support for tcp/10026 port as dspam_port_t
  - Allow dspam to connect/bind to dspam_port_t
  - Add uconfined_munin_plugin_exec_t for all plugins which are not covered by munin plugins policy
  - Allow domains that can read sssd_public_t files to also list the directory
  Resolves:#881413
  - Allow programs to run in fips_mode using fips_mode boolean
  - Change oddjob to transition to a ranged openshift_initr_exec_t when run from oddjob
  - Allow sshd to look into the mysql home directory for authorized_keys
  - Make rsync as homemanager which allows to manage CIFS/NFS	  
  -


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-185
changelog:
  - Apache is sending sinal to openshift_initrc_t now
  -  Allow all directories/files in /var/log starting with passenger to be labeled passenger_log_t
  - Allow winbind to manage samba_var_t sock files
  - Allow git-daemon and httpd to serve the same dir
  Resolves:#883143
  - Allow dac_override for nrpe


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-186
changelog:
  - Allow virtd to manage dnsmasq pid files
  - Allow all samba domains to create samba directory in var_t directory
  - Dontaudit attempts by openshift to read apache logs
  - Add labeling for /usr/share/ovirt-guest-agent/ovirt-guest-agent.py
  Resolves:#885432


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-187
changelog:
  - Add missing labeling for /usr/share/ovirt-guest-agent/ovirt-guest-agent.py
  Resolves:#885432
  - Add labeling for /var/nmbd
  - apache/drupal can run clamscan on uploaded content


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-188
changelog:
  - Allow rpcd_t to read /var/run/utmp
  - Make glance domains as permissive instead of just glance_t
  - Allow kill capability for ftpd
  - Add labeling for prespawn helper script
  Resolves:#886619
  - Allow winbind to stream connect to nmbd
  - Allow transition from virt domains to bridgehelper domain
  - Add support for watchdog script from sanlock
  - Add labeling for tmp-inst
  - Fix rhev policy
  - Update virt_qemu_ga policy
  - Backport wm_domain policy
  - Backport virtd_lxc_t and make it as unconfined domain


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-189
changelog:
  - Allow virt_qemu_ga to execute shutdown
  - sssd needs to connect to kerberos password port if a user changes his password
  - More fixes for the dspam domain
  - Allow dovecot to execute bash
  - Additional fixes for passenger
  Resolves:#886619
  - Add labeling for /var/run/checkquorum-timer


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-190
changelog:
  - Allow virtd to settattr on virt image dirs in MLS
  Resolves:#885045
  - Allow all postfix domains to connect to mysql stream
  - Call init_daemon_domain for rsync_t
  - Add labeling for /var/lib/pgsql/ssh 
  - Allow certmonger to send signal to itself
  - Allow rsyslog to read user tmp files using logging_syslog_can_read_tmp boolean
  - Add support for 1228/tcp and 1228/udp ports and allow corosync touse them
  - Allow corosync to read wdmd tmpfs
  - Allow wdmd to execute consoletype
  - Update man pages using sepolicy from Fedora
  - Fix admin interfaces


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-191
changelog:
  - Remove pam_selinux due to conflict
  - Add labeling for /etc/multipath - lvm_metadata_t
  Resolves:#880407
  - Add additional gitolite3 labeling


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-192
changelog:
  - Label /usr/lib/yaboot/addnote as bin_t
  - Allow postfix_local to read/write /var/spool/postfix/active
  - Allow postfix domains to list /tmp
  - Allow wdmd to transition to kdump
  Resolves:#887793
  - Add labeling for /var/named/chroot/etc/localtime


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-193
changelog:
  - Fix ssh_sysadm_login boolean for MLS
  Resolves:#865759
  - Allow rpm_script_t to dbus communicate with certmonger_t
  - More fixes for qemu-ga to make "guest-fsfreeze-freeze" working


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-194
changelog:
  - qdiskd needs to read usr_t/bin_t files
  - Allow dpsam to connect/bind to spamd ports
  - Allow munin services plugins to bind to generic node
  Resolves:#865759


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-195
changelog:
  - Make matahari domains as unconfined
  - Allow nscd to connect to nmbd
  Resolves:#901565
  - Allow setcap/getcap for syslogd


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-196
changelog:
  - Backport openshfit fixes
  - Allow cgred to use notify 
  Resolves:#913673
  - Allow mount to transition to gluster 
  - Fix tuned policy to make it working with the lastet tuned package


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-197
changelog:
  - Fix /etc/dhcp labeling
  - Back port openshift fixes
  - Make dirsrv-admin server restarted from console working
  - Add ftpd_use_fusefs boolean
  Resolves:#913673
  - openshift_cron_t needs dac_override


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-198
changelog:
  - Allow dirsrv-admin script to exec apache modules
  - Add labeling for dirsrv-admin lock file
  - Add labeling for /var/lib/owncloud
  - Add labeling for /var/www/moodle
  Resolves:#913673


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-199
changelog:
  - qemu-ga needs to execute scripts in /usr/libexec/qemu-ga
  - Allow openshift_cron_t to manage openshift_var_lib_t sym links
  - Allow dovecot-auth to execute bin_t
  - Allow mysqld-safe to execute bin_t
  - Allow procmail to manage user tmp files
  - Allow sanlock to kill svirt_t
  Resolves:#913673


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-203
changelog:
  - Allow dnsmasq to stream connect to quantum
  - Allow ifconfig domtrans to iptables and execute ldconfig
  Resolves:#966106
  - Make openshift_initrc_t as initrc domain


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-204
changelog:
  - Allow iptables to read and write quantum inherited pipes
  - Allow iptables to send sigchld to quantum
  Resolves:#966106


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-205
changelog:
  - Remove domtrans for quantum which needs to stay in the same domain
  - Allow qemu to manage nova lib files
  - Allow hald to read svirt images
  Resolves:#966106


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-208
changelog:
  - Merge cluster administrative domains to cluster_t. Back ported from Fedora
  Resolves:#915151
  - Aadd additinal rules for disk plugins
  - Allow setuid/setgid caps for syslogd_t
  - Dontaudit sendmail to  write dovecote-deliver tmp files
  - Add suppport for /var/lib/openvpn
  - /var/spool/snmptt is a directory which snmdp needs to write to


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-210
changelog:
  - Allow nrpe to list /var
  - Allow apache to search automount tmp dirs if http_use_nfs is enabled
  - Add support for strongswan
  - Fix description of ftpd_use_fusefs boolean
  - Allow kdumpgui to write dos files for /boot/efi/EFI/fedora/grub.cfg
  - Back port tgtd fixes from Fedora to allow sys_rawio cap
  - Add support for OpenDMARCD
  Resolves:#983551
  - Allow openvpn to run unconfined scripts
  - Allow amavis to execute shell
  Resolves:#979421
  - man pages should be owned only by selinux-policy-doc package
  - Fix fs_manage_nfs_files and fs_manage_nfs_dirs boolean to allow to search autofs
  - Allow mysqld-safe sys_nice/sys_resource caps
  Resolves:#975921
  - Add labeling for /boot/etc/yaboot.conf
  Resolves:#973156
  - /var/log/syslog-ng should be labeled var_log_t
  - Back port munin-cgi fixes
  - Fix ftp_home_dir boolean 
  - Allow kdump to read kcore on MLS system
  - Add support for svn ports
  - Add labels for /dev/ptp*
  - Add labels for /etc/security/opasswd
  - Fix labeling for /etc/localtime lnk file
  - Add  tftp booleans for NFS/CIFS access
  - Merge amavis,clamd,clamscan,freshclam policies to antivirus policy
  - Label all nagios plugins as nagios_unconfined_plugin_exec_t by default
  - Add additional ports as mongod_port_t
  - Allow sandbox domains to use inherted terminals
  - Allow pegasus to execute mount in pegasus_t domain
  - Fix *_admin interfaces  and interface descriptions
  - Allow yppasswdd to use NIS
  - Allow nagios to manage nagios spool files
  - Allow ABRT to domtrans to prelink
  Resolves:#921234
  - Fix labeling for /var/lib/dspam/
  Resolves:#919456
  - Label postfix-policyd-spf-perl as bin_t
  - Allow nrpe to run sudo
  - Label /usr/bin/yum-builddep as rpm_exec_t
  - Label /usr/local/bin/x11vnc as xserver_exec_t
  - Allow logwatch to domtrans to mdadm
  - Allow postfix-master to list /tmp dir
  - Add lldpad policy and make it as unconfined domain
  - Allow sysadm to admin postfix
  - ALlow postfix_virtual to stream connect to mysql
  - Update zabbix policy
  - Activate watchod policy and make it as unconfined
  - Add httpd_serve_cobbler_files boolean
  - Make postfix_postdrop_t as mta_agent to allow domtrans to system mail if it is executed by apache
  - Add oracleasm policy
  - Add support for pand
  - Add awstats_purge_apache_log_files boolean
  - Back port smstools policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-212
changelog:
  - Update rules for antivirus domains
  Resolves:#999471
  - Allow virt_domain to read virt_var_run_t symlinks
  - Allow chroot_user_t to read/write inherited user domain pty
  - Allow to start guest while the libvirtd is started with valgrind
  - Allow lldpad to talk with fcoemon
  - Allow chronyd sched_setscheduler


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-213
changelog:
  - Add openhpid policy
  Resolves:#1000521
  - Fix rhcs_domain_template to allow cluster_t to create socket in /var/run with correct labeling


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-214
changelog:
  - Allow git daemons to read localization
  - Allow tgtd_t to connect to isns ports
  Resolves:#1003571
  - Cleanup antivirus policy and add additional fixes
  - Fix labeling for munin CGI scripts
  - Allow virtd_t also relabel unix stream sockets for virt_image_type
  - Fix fs_search_auto_mountpoints to allow search automount tmp dirs
  Resolves:#990661


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-215
changelog:
  - Add port definition of pka_ca to port 829 for openshift
  - Rename quantum to neutron
  - Allow rpcd to request the kernel to load a module
  - Allow ovsdb-server to create dirs/files in /tmp directory


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-216
changelog:
  - Remove transition from virtd_t to qemu_t to stay in virtd_t if selinux_driver is None in qemu.conf
  - Allow openshift_cron_t to run ssh-keygen in ssh_keygen_t to access host keys


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-217
changelog:
  - Fix virtd_lxc_t to be able to communicate with hal
  - Allow NM and wireless working together
  Resolves:#1009661
  - Allow my_print_default to read /dev/urand


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-218
changelog:
  - Add support for /var/log/qemu-ga directory
  - Regenerate man pages for domains
  Resolves:#880728
  - Allow setgid capability for ipsec_t
  - Allow ipsec to send signull to itself
  - Add tcp/9000 as http_port_t
  - Allow dirsrv_t to create tmpfs_t directories
  - Fix git_role() interface


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-219
changelog:
  - Update httpd_can_sendmail boolean to allow read/write postfix spool maildrop
  - Allow tzdate to unlink etc_t lnk files
  - Allow jabberd to connect to jabber_interserver port
  - Fix description for logging_syslog_can_read_tmp boolean
  - Update ipsec rules and labels
  Resolves:#986883
  - Allow pegasus transition to mount_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-220
changelog:
  - Allow cobblerd to stream connect to MySQL
  - Allow cobblerd to execute ldconfig
  - Allow openstack-glance to access to amqp
  - Add labeling for /var/run/charon.*
  - Make munin "df" plugins working
  Resolves:#908095


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-221
changelog:
  - Fix /var/run/charon labeling
  - More fix for strongswant and ipsec.secretes
  - Allow sandbox domain to use inherited user terminals


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-223
changelog:
  - Fix dovecot_rw_pipes() interface
  - Allow piranha_pulse_t to search tmpfs
  - Allow sysadm to stream connect to postfix-master process
  - Label /usr/sbin/fence_sanlockd as fenced_exec_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-225
changelog:
  - Re-write rules to create tmpfs for all piranha tmpfs files/dirs
  - Allow piranha-lvs to manage piranha_tmpfs_t
  Resolves:#1018306


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-226
changelog:
  - Label /usr/sbin/fence_scsi as fenced_exec_t
  - Fix cluster domains to create dirs in /var/run/cluster as var_run_t to make resource scripts working
  Resolves:#915151


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-227
changelog:
  - Resource agents needs to manage /etc/cluster to place own config files
  Resolves:#915151
  - tgtd needs ipc_lock


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-228
changelog:
  - Add daemons_enable_cluster_mode boolean and turn on it by default until RHEL6.6
  Resolves:#915151
  - Add tcp/8893 as milter port
  - Allow antivirus domain to read localization without the boolean


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-229
changelog:
  - Add bootloader_exec_t labeling for /sbin/grubby
  Resolves:#915729
  - Add etc_runtime_t label for zipl.conf
  - Allow daemons to manage cluster lib files if daemons_enable_cluster_mode is enabled


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-231
changelog:
  - Add named_cache_t label for /var/lib/unbound
  - Fix puppet_domtrans_master() interface to make passenger working correctly if it wants to read puppet config files
  - Allow anitvirus domains to manage own log dirs


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-232
changelog:
  - Add more fixes for zabbix-agent
  - Fix neutron labeling
  - Allow all domains to read sysfs_t due to glibc change
  - Allow ping to read inherited zabbix tmp files
  Resolves:#1039851
  - Allow hostname to read/write inherited rpm script files


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-233
changelog:
  - Add support for OpenShift syslog plugin
  - Allow snmpd to getattr on removeable and fixed disks
  - Add shmemnetgrp and getnetgrp to access_vectors
  Resolves:#1025758


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-235
changelog:
  - Add support for nginx
  Resolves:#1045041
  - Change shutdown_t to also read wtmp
  - Added support for hypervkvpd
  - Add preupgrade policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-236
changelog:
  - Added conman policy
  - Added label for conman port
  - Added support for mip6d policy
  - Added support for isns
  - Added rtas_errd policy
  - Added support for keepalived policy
  - Add label samba_spool_t for /var/spool/samba
  - Allow httpd_t to bind preupgrade port if httpd_run_preupgrade boolean is enabled
  - Allow openshift_cron_t to append to openshift log files
  - dontaudit sudo domains listing /dev
  - Allow read/write to login records
  - Allow auditctl getattr access on blk_file
  - Allow nova-scheduler to read utmp
  - Added stapserver policy
  - Added support for freeipmi services
  - Added lsm policy
  - Added support for pcp service
  - Added chown capability to dhcpd_t domain
  - Add boolean to allow openshift domains nfs access
  - Allow abrt to read man pages and getcap
  - Allow cgroupdrulesengd to create content in cgoups directories
  - Dontaudit smbd_t sending out random signuls
  - Backport all zabbix changes
  - Allow mcelog write access to nscd socket


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-237
changelog:
  - Fixes for mirrormanager
  - Fix swift interface
  - Allow lsmd_plugin_t to read localization
  - Allow keepalived read snmp libs, Allow keepalived connect to agentx port
  - Allow keepalived read localization
  - Added setuid capability to lsm service
  - Added some swift rules to rsync policy
  - Remove duplicate line entry in .fc
  - Do not send/receive packets when ftpd_use_passive_mode is disabled
  - Add mirrormanager policy to RHEL6 Fixes Bug 1042864
  - Update permissivedomains by mirrormanager
  - Add mirrormanager policy
  - Added support for openwsmand
  - Added policy for swift
  - Added support for sblim
  - label also 64bit heartbeat libs
  - Allow kill capability on varnish
  - Added haveged policy
  - Add missing kernel_rw_stream_socket_perms
  - Label tcp/udp port no. 3052 as apc, Allow apcups to bind on apc port
  - Allow logwatch stream connect to courier service
  - Fix mcelog policy
  - Back port rsyslog fixes from RHEL7 for rsyslog7
  - Fix whitespace
  - Add support for osad
  - Fix automount policy
  - Added policy for bacula
  - add radvd_read_pid_files inteface
  - Add missing syslog-conn port
  - Allow httpd_t write to kernel keyring
  - Allow httpd_sys_script_t domain to send system log messages 
  - Allow passwd_t to write to ipa trusted user files in /tmp 
  - Boolean to allow mcelog use all the user ttys 
  - Allow icecast to use any tcp ports 
  - Define oracleasm_t as a device node 
  - Allow sudomain to getattr of kernel interface
  - Add squid directory in /var/run
  - Allow automount read nfs symlinks
  - Allow asterisk to connect to the apache ports
  - allow abrt to read mcelog log file 
  - allow udev to search radvd files under the /run dir 
  - allow auditctl getattr access on blk_file 
  Resolves:#1080555
  - Allow ssh to manage nfs links


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-238
changelog:
  - Allow domain to read an append inherited tmp files
  - Dontauit leaks of var_t into ifconfig_t
  - Allow fsdaemon_t to read/write device_t char files 
  Resolves:#1035363
  - Remove sblim_filetrans_named_content in RHEL6
  - We don't have systemd in RHEL6.
  - one more fix for bacula_admin()
  - fix bacula_run_admin()
  - Remove shadow_t label from /etc/security/opasswd 
  - Fix logrotate_use_nfs boolean
  - Allow userdom to read inherited users files in /tmp 
  - Allow certmonger_t read puppet libs
  - Allow in logging_inherit_append_all_logs also ioctl and append
  - Label pacemaker_remoted as cluster_exec_t
  - Tag some conman exec files
  - Allow conman to read localization
  - Should use rw_socket_perms rather then sock_file on a unix_stream_socket
  - Added conman fixes
  - Allow apache to manage passenger sock_files
  - Allow bacula to bind on 9103 tcp port
  - Allow postfix stream connect to antivirus
  - Allow osad to read localization


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-239
changelog:
  - Fixed lsmd_plugin_t
  Resolves:#1111619
  - Added glusterd_conf_t alias glusterd_etc_t
  - Allow samba to touch/manage fifo_files or sock_files in a samba_share_t directory 
  Resolves:#982160
  - Label zabbix-proxy files
  Resolves:#1018211
  - allow sshd to write to all process levels in order to change passwd when running at a level
  Resolves:#837616
  - Allow updpwd_t to downgrade /etc/passwd file to s0, if it is not running with this range 
  Resolves:#837616
  - Rename quantum port to neutron 
  Resolves:#1024927
  - Added zarafa_read_lib_files interface
  - Added dont audit list non security files in xdm_t 
  Resolves:#1030760
  - Added more fixes relates to 
  Resolves:#1060656
  - Added dontaudit rules to xdm_t 
  Resolves:#1030760
  - Allow procmail to run zarafa-degent 
  Resolves:#1060656
  - Add userdom_user_application_domain in xauth 
  Resolves:#1013832
  - Allow dmesg read raw memory 
  Resolves:#1030762
  - Allow communication between postfix and cyrus 
  Resolves:#1057307


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-240
changelog:
  - Allow nagios to stream connect to postgresqlBZ #1015708
  Resolves:#1015708
  - Allow hypervkvp read localization
  - Fix postfix_admin()
  - Add lldpad policy for MLS


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-241
changelog:
  - Remove deny_ptrace from interfaces
  - Add setpgid procces to mip6d_t
  - Added support for hv_vss_daemon
  - Allow keepalived also managed snmp lib dirs
  - Allow chroot_user_t unconfined shell domtrans
  Resolves:#1082183
  - Label swift-object-expirer as swift_exec_t
  - Allow keepalived manage snmp files, dontaudit list tmp files
  Resolves:#1053450
  - Additional fix for calling postfix interfaces in sysadm.te to make postfix_admin() working


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-243
changelog:
  - Implement new prelink_mask_t domain to which transition all domain by default (using fips_mode boolean) except prelink_transition domains.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-244
changelog:
  - Add support for vdsm 
  Resolves:#1064270
  - Allow userdomain role to access prelink_mask_t
  - Rename module glusterfs to glusterd 
  Resolves:#1052206
  - Allow gfs_controld_t to getattr on all file systems 
  Resolves:#1110886
  - Allow apache to manage pid sock files 
  Resolves:#1042864
  - Bind TCP/UDP sockets to the nfs port
  - The /var/run/tuned directory is not a regular file 
  Resolves:#1117685
  - Allow utilize winbind for authentication to AD. 
  Resolves:#1084177
  - Dont audit access on /etc/init.d/mcollective for kdump_t
  - FIx labeling in networkmanager.fc
  - Allow passenger to connect to MySQL
  - ALlow passenger to read locales
  - Dontaudit relabelfrom/relabelto for all variablefiles for prelink_map_t
  - Change all var_lib_t types to have also variablestatefile attribute
  - Implement new prelink_mask_t domain to which transition all domain by default (using fips_mode boolean) except prelink_transition domains.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-245
changelog:
  - Allow setpgid for all sandbox domains.
  - Allow sandbox domains read all mountpoint symlinks to make symlinked homedirs working with sandbox.
  - One more fix for osad.te
  - Back port osad changes from RHEL7.
  - Rename svirt_lxc_file_t to svirt_sandbox_file_t.
  - Label nginx init script as httpd_initrc_exec_t 
  Resolves:#1045041
  - Allow postfix_smtpd to stream connect to antivirus 
  Resolves:#1105889
  - Label init thttpd file as httpd_initrc_exec_t 
  Resolves:#1069843
  - Allow httpd to setattr on httpd_log files
  Resolves:#1111581
  - Add tomcat
  - Allow zabbix to read system network state
  - Allow ndc to read random and urandom device 
  Resolves:#1110397
  - Add kerberos support for radiusd.
  - Allow procmail to ioctl on zarafa-deliver executable.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-246
changelog:
  - Add boolean to allow user login programs access to /etc/shadow
  - Use old icecast_connect_any boolean name and dontaudit list /tmp with tmp_t labeling
  - Remove unused interface rtas_errd_systemctl 
  Resolves:#1121169
  - Allow prelink_mask to use user terminals and dontaudit relabel tmpfiles.
  - Dontaudit r/w inherited lockfiles/tmpfiles for prelink_mask_t.
  - Allow prelink_mask to append all log files.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-247
changelog:
  - Add all login domain auth_can_read_shadow_passwords attribute.
  - Added support for dhcrelay service
  Resolves: #1123338
  - We need to call auth_tunable_read_shadow in auth_shadow boolean.
  - Move authlogin_shadow to authlogin.if.
  - Add filetrans also for bacula log files.
  - Dontaudit kdumpgui to read openshift_initrc_exec_t
  Resolves: #1023336
  - Allow squid to manage squid_var_run_t sock_file
  Resolves: #1102346
  - Alloe bacula manage bacula_log_t dirs
  Resolves: #1122545
  - Added sys_ptrace cap. to stapserver_t
  Resolves: #811366
  - Label also /var/run/glusterd.socket file as glusterd_var_run_t
  Resolves: #1052206
  - Added support for collectd daemon
  Resolves: #1024715
  - Label conmans pid file as conman_var_run_t, Resolves: #1122106
  - Fix authlogin_shadow boolean to have it for all login_pgm domains
  - Dontaudit r/w inherited all log files for prelink_mask_t
  - Label zabbix_var_lib_t directories
  Resolves: #1053205
  - Allow all sblim domain to read localization data
  Resolves:##1122022


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-248
changelog:
  - Allow openshift_cron_t to append to openshift log files, label /var/log/openshift 
  Resolves: #1034206
  - Do not send/receive packets when ftpd_use_passive_mode is disabled 
  Resolves: #1105544
  - Allow qemu-ga domtrans to hwclock 
  Resolves: #1062384
  - Allow sshd read access to files on ftp directory 
  Resolves: #1097387
  - dontaudit r/w inherited certs for prelink_mask_t.
  - Allow sblim_gatherd_t to search all mountpoints. This is caused by ps. Should not be needed in Fedora.
  - Fix labeling in dhcpc.fc.
  - Add labels also for glusterd sockets.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-249
changelog:
  - Add support for luci.
  - Add support for rhsmd and treat it with rhsmcertd_t.
  - Make zabbix_agent_t as unconfined domain for rhel6.6.
  - Allow chroot_user_t to change process identity.
  Resolves:#1082183
  - Revert "Remove shadow_t label from /etc/security/opasswd
  - Dontaudit relabel lib_t files for prelink_mask_t.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-250
changelog:
  - Dontaudit read/write/setattr all pipes for prelink domains on all domains
  Resolves:#1103674
  - Allow chroot_user_t to change the role.
  - Add sys_time caps for virt_qemu_ga_t
  - Add label for /usr/sbin/luci


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-251
changelog:
  - Allow tgtd service to read kernel network state
  Resolves: 1130040
  - Allow mail-servers policies to read pcp libs
  Resolves: 1130934
  - Allow passwd_t to read/write stream sockets
  Resolves: #1129296
  - Add support for zabbix external scripts for which zabbix_script_t domain has been created. This domain is unconfined by default and user needs to run 'semodule -d unconfined' to make system running without unconfined domains. 
  - Dontaudit zebra to read getattr for all files and dirs
  Resolves: 1122031
  - Allow zebra to read /dev/urandom
  Resolves: #1122031
  - Label /var/lib/asterisk/agi-bin as bin_t
  - Added to lldpad policy sys_resource cap. and allow read localization 
  Resolves:1021984
  - Fix path to luci(/usr/sbin/luci) 
  Resolves:1023202
  - Add auth_can_read_shadow_passwords for rlogind.
  - Add authlogin_shadow boolean for all login domains.
  - Dontaudit rw all non security leaks.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-252
changelog:
  - Allow aide_t to read /dev/random and /dev/urandom.
  - Allow sysadm to talk with lldpad over unix dgram socket.
  - Allow sysadm to send/recv with unix dgram socket.
  - Allow crond_t to read lastlog.
  - Allow xdm_t to read plymouthd_spool_t files
  Resolves:#1131195
  - Allow hald to rpm dbus chat
  - Additional dontaudits for prelink_mask_t.
  - Add samba_domain attribute also for smbcontrol_t and winbind_helper_t.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-253
changelog:
  - Add additional dontaudits for prelink_mask_t
  Resolves:#1103674
  - Allow local_login_t and xdm_t to manage shadow_t because of PAM


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-254
changelog:
  - Dontaudit to read/write all dev nodes for prelink_mask_t.
  - Add label for path /var/lib/ctdb
  - Allow escd access to /var/run/pcscd.events directory
  Resolves:#1103674


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-255
changelog:
  - Allow couriertcpd to read /var/spool/courier dir.
  - Allow prelink domain to rea /dev/mem.
  - ALlow transition to prelink_t instead of prelink_mask_t to ABRT domains/rpm.
  Resolves:#1103674


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-257
changelog:
  - Add fixes for sblim_sfcbd to make libvirt-cim working.
  - Allow keepalived stream connect to snmpd
  - Allow local_login_t and xdm_t to manage etc_t if authlogin_can_shadow boolean.
  - Allow prelink_transition_domain to send signal to prelink_mask_t.
  Resolves:#1103674


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-258
changelog:
  - Allow unlink lib_t located in /tmp for prelink_mask_t.
  Resolves:#1103674
  - Add support for pnp4nagios
  - Allow mysql to read all domain state
  - Allow sblim_sfcbd_t to search virt images
  - Revert "Remove shadow_t label from /etc/security/opasswd "


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-260
changelog:
  - Add virt_getattr_images and call it for sblim_sfcbd_t.
  - We also need to call virt_search_images for sblim.
  Resolves:#1140614


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-261
changelog:
  - Allow sys_ptrace and dac_override caps for collectd.
  - Add labeling for /etc/rc\.d/init\.d/htcacheclean.
  - Allow /usr/sbin/sfcbd to send audit msgs.
  - Allow postdrop to connect to master process over unix stream socket.
  - Allow ssh_t to connect to all unreserved ports.
  - Allow setfiles domain to access files with admin_home_t. semanage -i /root/testfile.
  - Don't relabel files under /dev/shm/
  - Allow munin_disk_plugin_t getattr access on blk_file 
  - Allow xauth_t and sshd_t to search automount_tmp_t if use_nfs_home_dirs boolean.
  - Add suppor for keepalived unconfined scripts and allow keepalived to read all domain state and kill capability.
  - Allow antivirus domains to read all dirs/files regardless of their MCS category set.
  - Add labeling for mariadb log/pid files/dirs.
  - Allow rsyslogd to read /proc/sys/vm/overcommit_memory file.
  - Allow slapd to read /usr/share/cracklib/pw_dict.hwm.
  - Remove ftpd_use_passive_mode boolean. It does not make sense due to ephemeral port handling.
  - Add support for /usr/libexec/sssd/selinux_child and create sssd_selinux_manager_t domain for it.
  - Allow qpidd to read network state and sysctls dirs
  Resolves:#1171275
  - Add labeling for /var/bacula directory.
  - mcelog runs as a daemon domain 
  - Allow shutdown to r/w iherited rhev-agetnd pipes.
  - Allow sshd to seind signull itself.
  - Add the 'base_ro_file_type' and 'base_file_type' attributes to RHEL6.
  - Allow prelink_mask_t getattr on filesystems that support xattrs
  - Allow radious to connect to apache ports to do OCSP check.
  - remove transition from unconfined user to auditctl.
  - Backport RHEL7 sblim-sfcb fixes.
  - Add bacula fixes related to unconfined scripts based on ssekidde@redhat.com patch.
  - Allow zebra to communicate with sssd 
  - Add interfaces fixes.
  - Added some optional blogs from timemaster policy to chronyd.
  - Added linuxptp policy
  - Add interface to read mysql db link files
  - Added cinder policy
  - Make munin yum plugin as unconfined by default.
  - Allow bitlbee connections to the system DBUS.
  - Allow hv_vss_daemon to call ioctl(FIFREEZE) on /boot.
  - Add rsync_server boolean to don't have a transition from initrc by default.
  - Dontaudit to r/w inherited pipes from httpd because of certmonger unconfined scripts.
  - Backport all capabilities for cvs from RHEL7.
  - Allow dccproc to execute bash.
  - Fix labeling for /usr/libexec/nm-dispatcher.action.
  - Allow logrotate to manage virt_cache.
  - Allow osad to execute rhn_check.
  - Make osad_t as unconfined domain.
  - Allow osad connect to jabber client port.
  - Allow rhev-agentd to access /dev/.udev/db/block:sr0.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-262
changelog:
  - Allow lsmd_t getattr all exec.
  Resolves:#1141719
  - Update afs policy
  Resolves:#1136396
  - Add support for /usr/sbin/named-sdb.
  - Add support for mongos service.
  - Allow cyrus to use tcp/2005 port.
  - More service wants to auth_use_nsswitch.
  - Allow apps that need to read sysctl_vm_overcommit_t be able to read it.
  - Update passenger rules from RHEL7.
  - Allow smartd to manage generich devices if they are created with wrong label.
  - Allow sblim-sfcb to execute itself.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-263
changelog:
  - Allow userdomain to manage pcscd pid fifo files.
  - Allow prelink domain access to /dev/console 
  Resolves:#1145662
  - Allow httpd search access on tomcat6 directory
  - Allow apcupsd to get attributes of filesystems with xattrs
  - Allow qemu-ga getattr access of all filesystems
  - Allow abrt to read network state information
  - Make collectd_t as unconfined domain.
  - Make rpcbind as nsswitch domain.
  - Back port labeling for /etc/my.cnf.d dir.
  - Allow dhcpd kill capability.
  - Allow cachefilesd to create cachefilesd_var_t
  - cvs_home backport from RHEL7.
  - Add support for new fence agent fence_mpath which is executed by fence_node
  - Allow lsmd plugin to run with configured SSSD.
  - Allow bacula access to tape devices
  - Allow sblim-sfcb setuid.
  - Allow sblim domain to read sysctls.
  - Allow ntp to read localtime and allow timemaster send a signal to ntpd.
  - Add cobblerd_t fixes
  - Allow mysqld_t to use pam
  - Dontaudit xguest_t communication with avahi_t via dbus
  - Allow cobblerd_t to communicate with sssd
  - Allow pmwebd to send and receive messages from avahi over dbus
  - Allow conman_t to commmunicate with sssd
  - Allow mysqld_t to send audit messages
  - Allow load_policy rw access to inherited sssd pipes
  - Update label for /etc/mcelog/.* files
  - Allow bacula_t to connect to psql via tcp/unix socket
  - Remove type to only match directories on /boot
  - Add more labels for ownCloud
  - Dontaudit net_admin capability for munin


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-264
changelog:
  - Allow qpidd to read own init script file.
  - Allow passenger to accept connection
  - Back port hypervkvp fixes from RHEL7
  - ALlow load_policy to list inotifyfs filesystem
  - Allow cluster domain to execute ldconfig and update lvm_read_config() interface
  -  Allow sssd_t to connect to samba TCP port
  - Allow NetworkManager to run arping
  Resolves:#1209854
  - Backport RHEL7 redis policy
  - Add apache log and lib labels for roundcubemail


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-265
changelog:
  - Allow redis to create /var/run/redis/redis.sock
  - Allow fence_mpathpersist to run mpathpersist which requires sys_admin capability.
  Resolves:#1206244
  - Allow rhn_check running as rpm to domtrans to shutdown domain
  - openshift_cache_t does exist


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-266
changelog:
  - Add audit_access permissions
  - Allow cupsd_t access to files in /etc dir
  - Allow hplip to dbus chat with all users.
  - Allow sblim-gathered sys_ptrace capability.
  - Allow sys_admin capability for gfs_controld
  - Add more cobbler labels to /var/lib/tftpboot/
  - Add new smbd_tmpfs_t type.
  - Add more fixes related to timemaster+ntp+ptp4l.
  - Fix cgdcbxd_admin() interface.
  - Add labeling for /var/tmp/kadmin_0 and /var/tmp/kiprop_0.
  - Dontaudit read access on admin_home_t for load_policy.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-267
changelog:
  - Allow ctdb to create rawip socket.
  - ALlow nmbd_t to crate nmbd_var_run_t dir under smbd_var_run_t.
  - Make ctdbd as userdom_home_reader.
  - Allow ctdbd to bind  smbd port.
  Resolves:#1219317


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-268
changelog:
  - Add labeling for /var/run/ctdb and allow samba domains to connect to ctdbd.
  Resolves:#1221929
  - Allow glusterd to read/write samba config files.
  - Update mysqld rules related to mysqld log files.
  - Add fixes for hypervkvp realed to ifdown/ifup scripts.
  - Update netlink_route_socket for ptp4l.
  - Allow sosreport to dbus chat with NM.
  - Allow glusterd to connect to /var/run/dbus/system_bus_socket.
  - ALlow glusterd to have sys_ptrace capability. Needed by gluster+samba configuration.
  - Add new boolean samba_load_libgfapi to allow smbd load libgfapi from gluster. Allow smbd to read gluster config files by default.
  - Allow gluster to transition to smbd. It is needed for smbd+gluster configuration.
  - Allow glusterd to read /dev/random.
  - Label all gluster hooks in /var/lib/gluster as bin_t. Thy are not created on the fly.
  - Update nagios_run_sudo boolean to allow run chkpwd.
  - Add labeling for /usr/sbin/kpropd.
  - Add nagios_run_sudo boolean
  - Allow ctdb to create rawip socket.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-269
changelog:
  - Fix labeling for /var/tmp/kiprop_0 to kadmind_tmp_t.
  - Allow postdrop runinng as postfix_postdrop_t to access /var/spool/postfix/public/pickup socket.
  - Allow gluster hooks scripts to transition to ctdbd_t.
  - Update policy rules for afs_fserver_t to allow connectto on unix_stream_socket.
  - Allow gluster transition to smbd_t also using samba init script.
  Resolves:#1221929


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-270
changelog:
  - Update policy rules for afs_fserver_t to allow connectto on unix_stream_socket instead of afs_t.
  - Allow smbd to access /var/lib/ctdb/persistent/secrets.tdb.0.
  - Allow glusterd to execute consoletype.
  - Glusterd wants to manage samba config files if they are setup together.
  Resolves:#1221929


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-271
changelog:
  - Remove ctdbd_manage_var_files() interface which is not used and is declared for the wrong type.
  Resolves:#1221929


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-272
changelog:
  - Allow hypervkvp to read default SELinux contexts.
  - Allow hypervkvp to write to /etc directories.
  - Update all man pages for RHEL6.7 SELinux domains/roles using the latest sepolicy-manpage from RHEL7.
  - Fix labeling for /var/lib/graphite-web
  - ALlow kpropd to connect to tcp/754 port.
  Resolves:#1220691
  - Allow php-fpm write access to /var/run/redis/redis.sock
  - Update fs_rw_inherited_nfs_files() to allow search auto mountpoints.
  - Dontaudit rpm leaks for prelink_mask_t.
  - Allow sysctl to have running under hypervkvp_t domain.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-273
changelog:
  - Fix redis_stream_connect interface.
  Resolves:#1220691
  - Allow kadmind to bind to kprop port.
  - Add new man pages for bacula


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-275
changelog:
  - Allow glusterd to have mknod capability. It creates a special file using mknod in a brick.
   - Update rules related to glusterd_brick_t.
   - Allow glusterd to execute lvm tools in the lvm_t target domain.
   - Allow glusterd to execute xfs_growfs in the target domain.
   - Add support for /usr/sbin/xfs_growfs.
   - Allow glusterd to create samba config files if it is started by service script and running with unconfined_u.
  Resolves:#1228109
  - Fix description for ftpd_use_passive_mode boolean.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-275
changelog:
  - Allow glusterd to have transition to insmod.
  - Allow glusterd to use geo-replication gluster tool.
  - Remove gluster from permissive domains.
  Resolves:#1229605


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-276
changelog:
  - Allow gluster to manage own log files.
  - S30samba-start gluster hooks wants to search audit logs. Dontaudit it.
  - Label gluster python hooks also as bin_t.
  - Allow samba_t net_admin capability to make CIFS mount working.
  Resolves:#1229605
  - Allow ssh_keygen_t to manage keys located in /var/lib/gluster.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-278
changelog:
  - Allow logrotate get attributes of all unallocated tty device nodes.
  - Add logging_syslogd_run_nagios_plugins boolean for rsyslog to allow transition to nagios unconfined plugins.
  - Allow glusterd to connect to init.
  Resolves:#1230371
  - Allow gluster do dbus chat with domain running as initrc_t.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-279.el6_7.1
changelog:
  - Backport gluster fixes from RHEL7
   - execute showmount in own domain
  Resolves:#1248520
   - execute nsfd in own domain
   - allow gluster to connect to all ports
   - Add support for /usr/sbin/ctdbd_wrapper.
   - nrpe needs kill capability to make gluster moniterd nodes working.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-279.el6_7.2
changelog:
  - Allow nmbd to create pids files/dirs under /var/run/samba with correct labeling.
  Resolves:#1248520


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-279.el6_7.6
changelog:
  - Allow qpidd to be working with MRG. It requires to manage symlinks in /var/lib/qpidd.
  Resolves:#1257318
  Resolves:#1257319


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-279.el6_7.8
changelog:
  - Allow ipsec_mgmt_t to access netlink route socket and set attributes for /var/run/pluto directories.
  Resolves:#1289019


author: Lukas Vrabec <lvrabec@redhat.com> 3.7.19-279.el6_7.9
changelog:
  - Allow smbcontrol to create a socket in /var/samba which uses for a communication with smbd, nmbd and winbind.
  Related: #1322688


author: Phil Knirsch <pknirsch@redhat.com> 1.17-1
changelog:
  - Update to sg3-utils-1.17
  - Split package up into 3 subpackages: sg3_utils, devel and libs
  - Some minor updates to the specfile


author: Phil Knirsch <pknirsch@redhat.com> - 1.25-4
changelog:
  - Dropped really unnecessary Provides of sg_utils (#226414)
  - Use --disable-static in configure (#226414)


author: Dan Horák <dan@danny.cz> - 1.28-1
changelog:
  - update to version 1.28
  - added fixes from RHEL to rescan-scsi-bus.sh
  - added scsi-rescan symlink to the rescan-scsi-bus.sh script


author: Dan Horák <dan@danny.cz> - 1.28-2
changelog:
  - include rescan-scsi-bus script 1.35
  - rebase patches and add fix for issue mentioned in #538787
  - Related: #538787


author: Adam Stokes <ajs at redhat dot com> = 1.8-21
changelog:
  - more sanitizing options for log files
  - rhbz fixes from RHEL version merged into trunk
  - progressbar update


author: Adam Stokes <ajs at redhat dot com> = 1.9-1
changelog:
  - version bump 1.9
  - replaced compression utility with xz
  - strip threading/multiprocessing
  - simplified progress indicator
  - pylint update
  - put global vars in class container
  - unittests
  - simple profiling
  - make use of xgettext as pygettext is deprecated


author: Adam Stokes <ajs at redhat dot com> = 2.1-0
changelog:
  - Resolves: bz585923
  - Resolves: bz585942
  - Resolves: bz586409
  - Resolves: bz586389
  - Resolves: bz548096
  - Resolves: bz557828
  - Resolves: bz563637
  - Resolves: bz584253
  - Resolves: bz462823
  - Resolves: bz528881
  - Resolves: bz566170
  - Resolves: bz578787
  - Resolves: bz581817
  - Resolves: bz581826
  - Resolves: bz584695
  - Resolves: bz568637
  - Resolves: bz584767
  - Resolves: bz586370


author: Adam Stokes <ajs at redhat dot com> = 2.2-0
changelog:
  - Resolves: bz581921
  - Resolves: bz584253
  - Resolves: bz562651
  - Resolves: bz566170
  - Resolves: bz586450
  - Resolves: bz588223
  - Resolves: bz559737
  - Resolves: bz586405
  - Resolves: bz598978
  - Resolves: bz584763


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-3
changelog:
  - Fix cluster plugin dlm lockdump for el6
    Resolves: bz622407
  - Add sssd plugin to collect configuration and logs
    Resolves: bz624162
  - Collect /etc/anacrontab in system plugin
    Resolves: bz622527
  - Correct handling of redhat-release for el6
    Resolves: bz622528


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-4
changelog:
  - Fix collection of logs and config files in sssd.py
    Resolves: bz624162
  - Add support for collecting entitlement certificates in rhn.py
    Resolves: bz678665


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-6
changelog:
  - Fix collection of chkconfig output in startup.py
    Resolves: bz659467
  - Collect /etc/dhcp in dhcp.py plugin
    Resolves: bz676522
  - Collect dmsetup ls --tree output in devicemapper.py
    Resolves: bz675559
  - Collect lsblk output in filesys.py
    Resolves: bz679433


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-9
changelog:
  - Collect yum repository list by default
    Resolves: bz600813
  - Add basic Infiniband plugin
    Resolves: bz673244
  - Add plugin for scsi-target-utils iSCSI target
    Resolves: bz677124
  - Fix autofs plugin LC_ALL usage
    Resolves: bz683404
  - Fix collection of lsusb and add collection of -t and -v outputs
    Resolves: bz691477
  - Extend data collection by qpidd plugin
    Resolves: bz726360
  - Add ethtool pause, coalesce and ring (-a, -c, -g) options to network plugin
    Resolves: bz726427


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-10
changelog:
  - Fix collection of data from LVM2 reporting tools in devicemapper plugin
    Resolves: bz704383
  - Add /proc/vmmemctl collection to vmware plugin
    Resolves: bz709491


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-11
changelog:
  - Truncate files that exceed specified size limit
    Resolves: bz683219
  - Add support for collecting Red Hat Subscrition Manager configuration
    Resolves: bz714293
  - Collect /etc/init on systems using upstart
    Resolves: bz694813
  - Don't strip whitespace from output of external programs
    Resolves: bz713449
  - Collect ipv6 neighbour table in network module
    Resolves: bz721163
  - Collect basic cgroups configuration data
    Resolves: bz729455


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-14
changelog:
  - Collect brctl show and showstp output
    Resolves: bz697899
  - Collect nslcd.conf in ldap plugin
    Resolves: bz682124


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-15
changelog:
  - Fix brctl collection when a bridge contains no interfaces
    Resolves: bz697899
  - Fix up2dateclient path in hardware plugin
    Resolves: bz736718


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-16
changelog:
  - Fix execution of RHN hardware.py from hardware plugin
    Resolves: bz736718
  - Fix hardware plugin to support new lsusb path
    Resolves: bz691477


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-18.el6
changelog:
  - Collect fence_virt.conf in cluster module
    Resolves: bz760995
  - Fix collection of /proc/net directory tree
    Resolves: bz730641
  - Gather output of cpufreq-info when present
    Resolves: bz760424
  - Fix brctl showstp output when bridges contain multiple interfaces
    Resolves: bz751273
  - Add /etc/modprobe.d to kernel module
    Resolves: bz749919
  - Ensure relative symlink targets are correctly handled when copying
    Resolves: bz782589
  - Fix satellite and proxy package detection in rhn plugin
    Resolves: bz749262
  - Collect stderr output from external commands
    Resolves: bz739080
  - Collect /proc/cgroups in the cgroups module
    Resolve: bz784874
  - Collect /proc/irq in the kernel module
    Resolves: bz784862
  - Fix installed-rpms formatting for long package names
    Resolves: bz767827
  - Add symbolic links for truncated log files
    Resolves: bz766583
  - Collect non-standard syslog and rsyslog log files
    Resolves: bz771501
  - Use correct paths for tomcat6 in RHN module
    Resolves: bz749279
  - Obscure root password if present in anacond-ks.cfg
    Resolves: bz790402
  - Do not accept embedded forward slashes in RHN usernames
    Resolves: bz771393
  - Add new sunrpc module to collect rpcinfo for gluster systems
    Resolves: bz784061


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-19.el6
changelog:
  - Collect additional diagnostic information for realtime systems
    Resolves: bz789096
  - Improve sanitization of RHN user and case number in report name
    Resolves: bz771393
  - Fix verbose output and debug logging
    Resolves: bz782339 
  - Add basic support for CloudForms data collection
    Resolves: bz752666
  - Add support for Subscription Asset Manager diagnostics
    Resolves: bz752670


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-22.el6
changelog:
  - Correct aeolus debug invocation in CloudForms module
    Resolves: bz752666
  - Update gluster module for gluster-3.3
    Resolves: bz784061
  - Add additional command output to gluster module
    Resolves: bz768641
  - Add support for collecting gluster configuration and logs
    Resolves: bz752549


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-24.el6
changelog:
  - Fix katello and aeolus command string syntax
    Resolves: bz752666
  - Remove stray hunk from gluster module patch
    Resolves: bz784061


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-29.el6
changelog:
  - Collect the swift configuration directory in gluster module
    Resolves: bz822442
  - Update IPA module and related plug-ins
    Resolves: bz812395


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-31.el6
changelog:
  - Avoid calling volume status when collecting gluster statedumps
    Resolves: bz849546
  - Use a default report name if --name is empty
    Resolves: bz822113
  - Quote tilde characters passed to shell in RPM module
    Resolves: bz821005
  - Collect KDC and named configuration in ipa module
    Resolves: bz825149
  - Sanitize hostname characters before using as report path
    Resolves: bz822174
  - Collect /etc/multipath in device-mapper module
    Resolves: bz817093
  - New plug-in for PostgreSQL
    Resolves: bz852049
  - Add OpenStack module
    Resolves: bz840057
  - Avoid deprecated sysctls in /proc/sys/net
    Resolves: bz834594
  - Fix error logging when calling external programs
    Resolves: bz824378
  - Use ip instead of ifconfig to generate network interface lists
    Resolves: bz833170


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-32.el6
changelog:
  - Collect /proc/pagetypeinfo in memory module
    Resolves: bz809727
  - Strip trailing newline from command output
    Resolves: bz850433
  - Add sanlock module
    Resolves: bz850779
  - Do not collect archived accounting files in psacct module
    Resolves: bz850542
  - Call spacewalk-debug from rhn module to collect satellite data
    Resolves: bz859142


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-33.el6
changelog:
  - Add Red Hat Update Infrastructure module
    Resolves: bz821323
  - Collect /proc/iomem in hardware module
    Resolves: bz840975
  - Collect subscription-manager output in general module
    Resolves: bz825968
  - Collect rhsm log files in general module
    Resolves: bz826312
  - Fix exception in gluster module on non-gluster systems
    Resolves: bz849546
  - Fix exception in psql module when dbname is not given
    Resolves: bz852049


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-35.el6
changelog:
  - Report --name and --ticket values as defaults
    Resolves: bz822113
  - Fix device-mapper command execution logging
    Resolves: bz824378
  - Fix data collection and rename PostreSQL module to pgsql
    Resolves: bz852049


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-40.el6
changelog:
  - Backport SELinux enhancements from upstream
    Resolves: bz876309
  - Fix invocation of 'udevadm info' in device-mapper plug-in
    Resolves: bz947424


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-41.el6
changelog:
  - Exclude RPC files from procfs data collection in networking module
    Resolves: bz913201
  - Add NFS client plug-in
    Resolves: bz907861
  - Restrict wbinfo collection to local domain in samba plug-in
    Resolves: bz986973


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-42.el6
changelog:
  - Update sosreport user interface text
    Resolves: bz878589
  - Preserve ownership and permissions on collected files
    Resolves: bz888724
  - Do not collect krb5.keytab in samba plug-in
    Resolves: bz987103
  - Collect output of 'ls -l /var/named' in named plug-in
    Resolves: bz896713
  - Collect /var/log/squid in squid plug-in
    Resolves: bz955671
  - Fix systool invocation in device-mapper plug-in
    Resolves: bz868719
  - Add plug-in to collect OpenHPI configuration
    Resolves: bz924338
  - Fix traceback in sar module when /var/log/sa does not exist
    Resolves: bz883443
  - Collect mountstats and mountinfo files in filesys plug-in
    Resolves: bz988417
  - Add crm_report integration for pacemaker to cluster plug-in
    Resolves: bz989292


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-43.el6
changelog:
  - Add restricted rpm verify
    Resolves: bz888589
  - Add new foreman plug-in
    Resolves: bz976386
  - Collect saved vmcore-dmesg.txt files in kdump plug-in
    Resolves: bz924839
  - Obfuscate luci secrets in cluster plug-in
    Resolves: bz986301
  - Remove rpm list collection from RHN module
    Resolves: bz884609
  - Add gluster geo-replication status and sync with RHS version
    Resolves: bz868711
  - Obscure passwords in libvirt and corosync data
    Resolves: bz883811
  - Make krb5 plug-in conform with sos-2.2 plug-in API
    Resolves: bz987103
  - Add further NIS data collection
    Resolves: bz928748
  - Fix symbol collection for modern kernels
    Resolves: bz970417
  - Disable 'ipsec barf' collection in openswan plug-in
    Resolves: bz924925
  - Add pam_ldap.conf collection to ldap plug-in
    Resolves: bz877395
  - Force LC_ALL=C for external commands
    Resolves: bz888488
  - Rationalise lvm2 plug-in lvmdump options
    Resolves: bz980959
  - Backport addCopySpecs from upstream
    Resolves: bz924338, bz907861


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-45.el6
changelog:
  - Fix collection of squid log files
    Resolves: bz955671
  - Fix regex substitution in openhpi plug-in
    Resolves: bz924338
  - Fix typo in /proc/kallsyms collection
    Resolves: bz970417
  - Fix exception while post-processing command output
    Resolves: bz986301, bz883811


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-46.el6
changelog:
  - Fix obfuscation of luci secrets in cluster plug-in
    Resolves: bz986301
  - Fix password substitution in libvirt plug-in
    Resolves: bz883811


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-54.el6
changelog:
  - [hpasm] new plugin to collect HP ASM information
    Resolves: bz915115
  - [sos] improve handling of fatal IO errors
    Resolves: bz1085042
  - [bootloader] collect grub.conf for UEFI based systems
    Resolves: bz1076388
  - [ctdb] add plugin to collect Samba CTDB information
    Resolves: bz961041
  - [keepalived] new plugin
    Resolves: bz1107862
  - [sssd] scrub ldap_default_authtok in sssd plugin
    Resolves: bz1013366
  - [haproxy] new plugin
    Resolves: bz1107866
  - [gluster] add 'logsize' and 'all_logs' plugin options
    Resolves: bz1002619


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-55.el6
changelog:
  - [selinux] pass --input-logs when calling ausearch
    Resolves: bz1032706
  - [printing] fix cups log file size limiting
    Resolves: bz1061529
  - [auditd] fix log size limiting
    Resolves: bz1061529
  - [hardware] call hardware.py directly instead of invoking python
    Resolves: bz1041770


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-56.el6
changelog:
  - [ipa] add ipa-replica-manage output
    Resolves: bz1012410
  - [bootloader] Include /etc/yaboot.conf
    Resolves: bz1001941
  - [cluster] collect /sys/fs/gfs2/*/withdraw
    Resolves: bz997174
  - [general] do not collect /var/log/sa
    Resolves: bz1001600
  - [networking] avoid Cisco cdp paths in /proc and /sys
    Resolves: bz1004936
  - [sar] Handle compressed binary data files better
    Resolves: bz1001600
  - [sar] Add file size limits
    Resolves: bz1001600
  - [sar] Enable XML data collection
    Resolves: bz1001600


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-57.el6
changelog:
  - [tomcat] update for tomcat6 and add password filtering
    Resolves: bz1088070
  - [filesys] collect dumpe2fs -h output by default
    Resolves: bz1105629
  - [rpm] reduce number of calls to rpm
    Resolves: bz1019872
  - Verify fewer packages in rpm plug-in
    Resolves: bz1019872
  - [bootloader] elide bootloader password
    Resolves: bz1101311
  - [plugin] backport do_path_regex_sub()
    Resolves: bz1101311
  - [networking] do not attempt to read use-gss-proxy
    Resolves: bz1079954
  - [mysql] limit log collection by default
    Resolves: bz1015783
  - [mysql] add optional database dump support
    Resolves: bz1032262
  - [docs] update man pages
    Resolves: bz1022226
  - [sosreport] log exceptions during Plugin.postproc()
    Resolves: bz1020445
  - [distupgrade] elide passwords in kickstart user directives
    Resolves: bz1052344


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-60.el6
changelog:
  - [mongodb] backport new plugin from upstream
  - [activemq] backport new plugin from upstream
  - [openshift] sync plugin with upstream
  - [plugin] backport collectExtOutputs and addCopySpecs
  - Make OpenShift module collect domain information
  - Add 'gear' option to OpenShift module
  - Add OpenShift module
    Resolves: bz1039755
  - [plugin] backport addCopySpecLimit tailit parameter
    Resolves: bz1001600


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-61.el6
changelog:
  - [powerpc] backport plugin from upstream
    Resolves: bz977190
  - [devicemapper] set locking_type=0 when calling lvm2 commands
    Resolves: bz1102282
  - [nfsserver] collect 'exportfs -v'
    Resolves: bz985512
  - [openshift] improve password redaction
    Resolves: bz1039755
  - [openshift] don't collect all of /etc/openshift
    Resolves: bz1039755


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-62.el6
changelog:
  - Restrict ldap and ds plugin paths to avoid collecting secrets
    Resolves: bz994628
  - Add certutil output to ldap and ds plugins to summarize certs
    Resolves: bz994628


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-65.el6
changelog:
  - [grub] Fix grub.conf path for grub-1.x versions
    Resolves: bz1076388
  - [ds] Fix logging exception when plugin force-enabled
    Resolves: bz994628


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-68.el6
changelog:
  - [ds] add collection of ds admin server configuration
    Resolves: bz994628
  - [ldap] ensure /etc/openldap/ content is collected
    Resolves: bz994628
  - [plugintools] preserve permissions on directories
    Resolves: bz1069786


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-3
changelog:
  - [pam] add pam_tally2 and faillock support
  - [postgresql] obtain db password from the environment
  - [pcp] add Performance Co-Pilot plugin
  - [nfsserver] collect /etc/exports.d
  - [sosreport] handle --compression-type correctly
  - [anaconda] redact passwords in kickstart configurations
  - [haproxy] add new plugin
  - [keepalived] add new plugin
  - [lvm2] set locking_type=0 when calling lvm commands
  - [tuned] add new plugin
  - [cgroups] collect /etc/sysconfig/cgred
  - [plugins] ensure doc text is always displayed for plugins
  - [sosreport] fix the distribution version API call
  - [docker] add new plugin
  - [openstack_*] include broken-out openstack plugins
  - [mysql] support MariaDB
  - [openstack] do not collect /var/lib/nova
  - [grub2] collect grub.cfg on UEFI systems
  - [sosreport] handle out-of-space errors gracefully
  - [firewalld] new plugin
  - [networking] collect NetworkManager status
  - [kpatch] new plugin
  - [global] update to upstream 3.2 release


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-4
changelog:
  - [yum] call rhsm-debug with --no-subscriptions
  - [powerpc] allow PowerPC plugin to run on ppc64le
  - [package] add Obsoletes for sos-plugins-openstack


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-5
changelog:
  - [corosync] add postprocessing for corosync-objctl output
  - [ovirt_hosted_engine] fix exception when force-enabled


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-6
changelog:
  - [tomcat] add support for tomcat7 and default log size limits
  - [mysql] obtain database password from the environment


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-8
changelog:
  - [kpatch] do not attempt to collect data if kpatch is not installed
  - [archive] drop support for Zip archives


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-9
changelog:
  - [navicli] catch exceptions if stdin is unreadable
  - [docs] update man page for new options
  - [sosreport] make all utf-8 handling user errors=ignore


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-11
changelog:
  - [sosreport] do not make logging calls after OSError
  - [sosreport] catch OSError exceptions in SoSReport.execute()
  - [anaconda] make useradd password regex tolerant of whitespace


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-12
changelog:
  - [plugin] limit path names to PC_NAME_MAX
  - [squid] collect files from /var/log/squid
  - [sosreport] log plugin exceptions to a file
  - [ctdb] fix collection of /etc/sysconfig/ctdb
  - [sosreport] fix silent exception handling


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-14
changelog:
  - [mysql] test for boolean values in dbuser and dbpass
  - [mysql] improve handling of dbuser, dbpass and MYSQL_PWD


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-15
changelog:
  - [global] update el6 to upstream 3.2 release 
    Resolves: bz1144525
  - [global] sync 3.2-15.el6 with RHEL-7.1
    Resolves: bz1144525


author: Shane Bradley <sbradley@redhat.com> = 3.2-16
changelog:
  - [cluster] Added package luci and fix lockdumps capturing.
    Resolves: bz1171186
  - [puppet] Adding new plugin for puppet
    Resolves: bz1172880
  - [block] parted will use sector units instead of human units.
    Resolves: bz1086537
  - [foreman] Added option to prevent generic resource collection with foreman plugin. Remove the plugin katello since data collection done by foreman-debug.
    Resolves: bz1135290


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-17
changelog:
  - [policy/redhat] use /tmp as default temporary directory
  - [global] remove dependency on python-six
    Resolves: bz1144525


author: Shane Bradley <sbradley@redhat.com> = 3.2-18
changelog:
  - [openshift] Collect additional config files.
    Resolves: bz1166874
  - [activemq] Honour all_logs and get config on RHEL.
    Resolves: bz1165878


author: Shane Bradley <sbradley@redhat.com> = 3.2-19
changelog:
  - [cluster] Ensure cluster sets 'make' to False when calling get_cmd_output_path().
    Resolves: bz1190723


author: Shane Bradley <sbradley@redhat.com> = 3.2-26
changelog:
  - [cluster] Scrub password from crm_report data.
    Resolves: bz1206581
  - [networking] Use the correct options for nmcli.
    Resolves: bz1206661


author: Uri Lublin <uril@redhat.com> - 0.4.2-10
changelog:
  - spice: server: new-api (4 more patches)
       + streaming-video, agent-mouse, playback-compression.
  Related: #571286


author: Uri Lublin <uril@redhat.com> - 0.4.2-13
changelog:
  - remove Requires and BuildRequires mesa-libGLU-devel
    + open-gl is now disabled.
  - bumped release to -13 due to tag issue
  Related: #482556


author: Uri Lublin <uril@redhat.com> - 0.4.2-15
changelog:
  - Fix unsafe accesses
    + fix unsafe guest data accessing.
    + fix unsafe free() call.
    + fix unsafe cursor items handling.
    + add missing overflow check.
  Resolves: #568811


author: Uri Lublin <uril@redhat.com> - 0.7.2-2
changelog:
  - Rebase to spice upstream release 0.7.2
  - Drop all patches (all upstreamed)
  - Enable smartcard (CAC) support
  Resolves: #672035


author: Uri Lublin <uril@redhat.com> - 0.7.2-4
changelog:
  - smartcard -- libcacard 0.1.2 updates:
   - server
    - use network byte order when talking to device.
   - both
    - no more reader_id_t, uint32_t instead
    - no more ReaderAddResponse, use VSC_Error with
      code==VSC_SUCCESS instead.
    - change an assert to a red_printf("error:..")
      if got an unexpectedly undefined reader id.
   - client (not part of this package)
    - track number of expected reader insertions
  Resolves: #674937


author: Uri Lublin <uril@redhat.com> - 0.7.3-1
changelog:
  - Rebase to upstream 0.7.3:
    + Mostly smart-card updates:
      - including all the changes in 0.7.2.4
    + Some gcc warning cleanups.
  - Fix permissions of spice-server.pc
  Resolves: #672035


author: Uri Lublin <uril@redhat.com> - 0.8.0-1
changelog:
  - Rebase to upstream 0.8.0
    + Includes "Fix segfault on migration" patch
    + Some spice-client bug fixes.
  Resolves: #672035


author: Uri Lublin <uril@redhat.com> - 0.8.1-1
changelog:
  - Rebase to upstream 0.8.1, including
   + Make copy/paste support configurable
   + Some server/vdagent bugs fixed
  Resolves: #710200


author: Uri Lublin <uril@redhat.com> - 0.8.2-1
changelog:
  - Rebase to upstream 0.8.2, including
   + sasl support (fdo bz 34795)
   + support guest async io
   + support guest suspend and hibernate
   + add symbol versioning to libspice-server.so
   + prevent running an old spice-server with a newer qemu
   + Bug fixes (RHBZ): 714801, 713474, 674532, 653545
   + BuildRequires spice-protocol >= 0.8.1 and cyrus-sasl-devel
  Resolves: #723676


author: Uri Lublin <uril@redhat.com> - 0.8.2-3
changelog:
  - Drop unnecessary X11 and alsa requires from spice-server.pc
    + Fix a rpmdiff warning
  Related: rhbz#723676
  - server/red_dispatcher: fix wrong resolution set for tablet
  Resolves: rhbz#726973


author: Uri Lublin <uril@redhat.com> - 0.8.2-4
changelog:
  - semi-seamless migration support
  - added pyparsing.py as source, and using it to build the package.
  - client patches are not applied.
  - requires spice-protocol-0.8.1-2 (equivalent to upstream 0.8.2)
  - advertise itself as version 0.8.3, to notify the new feature.
  Resolves: rhbz#738266


author: Hans de Goede <hdegoede@redhat.com> - 0.10.1-1
changelog:
  - Rebase to upstream 0.10.1
  Resolves: rhbz#758089
  - This release adds support for usbredirection
  Resolves: rhbz#758091
  - This release fixes a bug in smartcard error handling
  Resolves: rhbz#741259


author: Christophe Fergeau <cfergeau@redhat.com> - 0.10.1-4
changelog:
  - add more logging for expired/invalid tickets
    Resolves: rhbz#787669
  - add more logging about use of certificates
    Resolves: rhbz#787678


author: Yonit Halperin <yhalperi@redhat.com> - 0.10.1-6
changelog:
  - Fix glitches in youtube movies
      + support video streams with frames of different sizes
    Resolves: rhbz#813826


author: Yonit Halperin <yhalperi@redhat.com> 0.10.1-9
changelog:
  - Fix memory leak during video streaming
    Resolves rhbz#821334
  - Fix segfault introduced when fixing rhbz#813826
    Related: rhbz#813826


author: Uri Lublin <uril@redhat.com> 0.11.3-1
changelog:
  - Rebase to upstream spice-server 0.11.3, which adds:
    * Support for seamless migration
    * Support for Render
    * spice-protocol is in the tarball now (a submodule in git)
    Resolves: rhbz#836123
    Resolves: rhbz#842353


author: Uri Lublin <uril@redhat.com> 0.12.0-1
changelog:
  - Rebase to upstream spice-server 0.12.0, which adds:
    * support setting client monitor configuration via device
      QXLInterface::client_monitors_config
    * support notifying guest of client capabilities
      QXLInterface::set_client_capabilities
    * new capability for A8 Surface support
    Resolves: rhbz#836123
    Resolves: rhbz#842353
    Resolves: rhbz#842310


author: Yonit Halperin <yhalperi@redhat.com> 0.12.0-5
changelog:
  - Fix various migration related bugs
    * don't process both cmd ring and dispatcher queue till migration data is received
    * fix assigning bad memory references to marshaller
    * fix memory corruption when receiving display migration data that exceeds 1024 bytes
    Resolves: rhbz#866929
    Resolves: rhbz#862352
    Resolves: rhbz#878700


author: Yonit Halperin <yhalperi@redhat.com> 0.12.0-7
changelog:
  - Fix mishandling of agent data received from the client after agent disconnection
    Resolves: rhbz#881980


author: Uri Lublin <uril@redhat.com> 0.12.0-9
changelog:
  - Fix calling set_client_capabilities when it is unsupported by qemu
    (fixes a crash when qemu-kvm is started with spice but without qxl)
    Resolves: rhbz#880276


author: Uri Lublin <uril@redhat.com> - 0.12.0-13
changelog:
  - Migration related fixes
    * Destroy video streams before sending MSG_MIGRATE
    * Fix wrong is_low_bandwidth setting after 2 migrations of a session
      that was originally a low bandwidth one.
    Resolves: rhbz#950029
    Resolves: rhbz#956345


author: Uri Lublin <uril@redhat.com> - 0.12.3-1
changelog:
  - Rebase to upstream 0.12.3 + some additional patches
    Resolves: rhbz#952671
    Resolves: rhbz#884812
    Resolves: rhbz#918472
    Resolves: rhbz#958276
    Resolves: rhbz#978403


author: Uri Lublin <uril@redhat.com> - 0.12.4-1
changelog:
  - Rebase to upstream 0.12.4
    Resolves: rhbz#952671
    Resolves: rhbz#859027
    Resolves: rhbz#823472
    Resolves: rhbz#961848
    Resolves: rhbz#977998
    Resolves: rhbz#887775


author: Christophe Fergeau <cfergeau@redhat.com> 0.12.4-4
changelog:
  - Fix spice-server crash when client sends a password which is too long
    Resolves: rhbz#999839 (CVE-2013-4282)


author: Christophe Fergeau <cfergeau@redhat.com> 0.12.4-5
changelog:
  - Make sure we build with -Wl,-z,relro. We used to be getting that flag
    from openssl, but this is no longer the case, and rpmdiff gave a huge
    warning about it being gone
    Related: rhbz#999839 (CVE-2013-4282)


author: Christophe Fergeau <cfergeau@redhat.com> 0.12.4-8
changelog:
  - Fix bad dates in changelog
    Resolves: rhbz#1038670
  - Fix crash on migration during reboot
    Resolves: rhbz#1004443
  - Use TLS 1.0 or better
    Resolves: rhbz#1035695


author: Christophe Fergeau <cfergeau@redhat.com> 0.12.4-9
changelog:
  - Fix potential infinite loop on long running VMs (> 46 days)
    Resolves: rhbz#1072700
  - Fix assertion in video streaming code
    Resolves: rhbz#1086820


author: Christophe Fergeau <cfergeau@redhat.com> 0.12.4-12
changelog:
  - Fix spicevmc-related crash which could be triggered with older clients
    Resolves: rhbz#1163480
  - Fix crash when using VNC + QXL + rhel-6.0.0 machine type
    Resolves: rhbz#1135372


author: Christophe Fergeau <cfergeau@redhat.com> 0.12.4-12.1
changelog:
  - Avoid race conditions reading monitor configs from guest. This race could
    trigger memory corruption host-side
    Resolves: rhbz#1239124


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.6-2
changelog:
  - remove absolute path names from the PAM configuration, ensuring that the
    right modules get used for whichever arch we're built for
  - don't try to install the FAQ, which isn't there any more


author: Colin Walters <walters@redhat.com> 1.6.7p5-24
changelog:
  - Enhance sesh.c to fork/exec children itself, to avoid
    having sudo reap all domains.
  - Only reinstall default signal handlers immediately before
    exec of child with SELinux patch


author: Karel Zak <kzak@redhat.com> 1.6.8p9-1
changelog:
  - new version 1.6.8p9 (resolve #161116 - CAN-2005-1993 sudo trusted user arbitrary command execution)


author: Dan Walsh <dwalsh@redhat.com> 1.6.8p12-3
changelog:
  - Remove selinux patch.  It has been decided that the SELinux patch for sudo is
  - no longer necessary.  In tageted policy it had no effect.  In strict/MLS policy
  - We require the person using sudo to execute newrole before using sudo.


author: Karel Zak <kzak@redhat.com> 1.6.8p12-7
changelog:
  - fix #198755 - make login processes (sudo -i) initialise session keyring
    (thanks for PAM config files to David Howells)
  - add IPv6 support (patch by Milan Zazrivec)


author: Peter Vrabec <pvrabec@redhat.com> 1.6.9p17-2
changelog:
  - adjust audit patch, do not scream when kernel is
    compiled without audit netlink support (#401201)


author: Daniel Kopecek <dkopecek@redhat.com> 1.6.9p17-6
changelog:
  - fixed building with new libtool
  - fix for incorrect handling of groups in Runas_User
  - added /usr/local/sbin to secure-path


author: Daniel Kopecek <dkopecek@redhat.com> 1.7.1-4
changelog:
  - moved the closefrom() call before audit_help_open() (sudo-1.7.1-auditfix.patch)
  - epoch number sync


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.2p2-1
changelog:
  - new upstream version
    Resolves: rhbz#554321
  - drop *.pod man page duplicates from docs
  - commented out unused aliases in sudoers to make visudo happy (#550239)


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.2p2-5
changelog:
  - added patch that fixes insufficient environment sanitization issue (#598154)
    Resolves: rhbz#598383


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.2p2-7
changelog:
  - move the sudo_end* calls before closefrom()
  - close audit_fd before exec
  - fixed typo in Makefile.in
    Resolves: rhbz#569313


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.4p5-1
changelog:
  - rebase to latest stable version
  - sudo now uses /var/db/sudo for timestamps
  - new command available: sudoreplay
  - use native audit support
  - sync configuration paths with the nss_ldap package
    Resolves: rhbz#615087
    Resolves: rhbz#652726
    Resolves: rhbz#634159
    Resolves: rhbz#603823


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.4p5-6
changelog:
  - removed the --with-ldap-*conf options
  - added RELRO flags
    Resolves: rhbz#709235
    Resolves: rhbz#709859


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.4p5-8
changelog:
  - created a separate ldap configuration file, sudo-ldap.conf
  - visudo: mark unused aliases as warnings, not errors
  - backported signal handling from 1.7.5
  - don't disable coredumping from the code, rely on /proc/sys/fs/suid_dumpable
  - use correct SELinux context when editing files with sudoedit
  - fixed visudo syntax checks
  - fixed typos and inconsistencies in documentation
  - switched to an updated -getgrouplist patch to fix sudo -l -U <user> behavior 
    Resolves: rhbz#760843
    Resolves: rhbz#736030
    Resolves: rhbz#697775
    Resolves: rhbz#726634
    Resolves: rhbz#708515
    Resolves: rhbz#736653
    Resolves: rhbz#667120
    Resolves: rhbz#769701
    Resolves: rhbz#751680
    Resolves: rhbz#604297
    Resolves: rhbz#797511


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.4p5-9
changelog:
  - fixed uninitialized value warning introduced with the sudoedit-selinux patch
    Resolves: rhbz#806386


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.4p5-10
changelog:
  - fixed bug in Runas_Spec group matching (#810147)
  - disable `sudo -l' output word wrapping if the output
    is piped (#810326)
  - fixed `sudo -i' command escaping (#806095)
    Resolves: rhbz#806095
    Resolves: rhbz#810147
    Resolves: rhbz#810326


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.4p5-10.1
changelog:
  - backported ldap code modifications that fix an issue with tls_checkpeer (#810372)
    Resolves: rhbz#810372


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.4p5-11
changelog:
  - use SIG_SETMASK when resetting signal mask instead of SIG_UNBLOCK (#821976)
    Resolves: rhbz#821976


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-1
changelog:
  - rebase to 1.8.6p3
  - new -devel subpackage
  - new configuration file: /etc/sudo.conf
    Resolves: rhbz#852045 - ulimit -c got Operation not permitted
    Resolves: rhbz#804123 - sudo does not call pam_close_session() or pam_end()
    Resolves: rhbz#828707 - sudo fails to report error correctly when execv(3) fails
    Resolves: rhbz#844691 - Cannot set RLIMIT_NPROC to unlimited via pam_limits when running sudo
    Resolves: rhbz#759480 - Rebase sudo to 1.8 in RHEL 6.4
    Resolves: rhbz#846117 - Sudo interpretation of wildcard command arguments is more lenient providing a security risk
    Resolves: rhbz#789937 - [RFE] Add ability to treat files authoritatively in sudoers.ldap
    Resolves: rhbz#836242 - sudo -s -u USERNAME can't change ulimit -c


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-2
changelog:
  - extended the default sudo-ldap.conf file
  - corrected default file permissions on sudo.conf, sudo-ldap.conf
  - added patch that introduces the cmnd_no_wait Defaults option
    Resolves: rhbz#840980 - sudo creates a new parent process
    Resolves: rhbz#860397 - new /etc/sudo-ldap.conf configuration file problems


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-5
changelog:
  - Include just one sample plugin in the documentation for the -devel
    subpackage. Don't include architecture specific files.
  - patch: Do not inform the user that the command was not permitted by
    the policy if they do not successfully authenticate.
    Resolves: rhbz#759480
    Resolves: rhbz#871303
    Resolves: rhbz#872740


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-6
changelog:
  - added patches to address a number of issues in ldap & sssd plugins
  - fixed README.LDAP updating in the spec file
    Resolves: rhbz#860397
    Resolves: rhbz#876208
    Resolves: rhbz#876578
    Resolves: rhbz#879675
    Resolves: rhbz#879633


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-8
changelog:
  - updated man-page
  - fixed handling of RLIMIT_NPROC resource limit
  - fixed alias cycle detection code
  - added debug messages for tracing of netgroup matching
  - fixed aborting on realloc when displaying allowed commands
  - show the SUDO_USER in logs, if running commands as root
  - sssd: filter netgroups in the sudoUser attribute
    Resolves: rhbz#856901
    Resolves: rhbz#947276
    Resolves: rhbz#886648
    Resolves: rhbz#994563
    Resolves: rhbz#848111
    Resolves: rhbz#994626
    Resolves: rhbz#973228
    Resolves: rhbz#880150


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-9
changelog:
  - sssd: match against ipa_hostname from sssd.conf too when
    checking sudoHost
    Resolves: rhbz#853542


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-13
changelog:
  - RHEL-6.6 erratum
    - don't retry authentication when ctrl-c pressed
    - fix double-quote processing in Defaults options
    - fix sesh login shell argv[0]
    - handle the "(none)" hostname correctly
    - SSSD: fix ipa_hostname handling
    - SSSD: fix sudoUser netgroup specification filtering
    - SSSD: list correct user when -U <user> -l specified
    - SSSD: show rule names on long listing (-ll)
    Resolves: rhbz#1065415
    Resolves: rhbz#1078338
    Resolves: rhbz#1052940
    Resolves: rhbz#1083064
    Resolves: rhbz#1033703
    Resolves: rhbz#1006447
    Resolves: rhbz#1006463
    Resolves: rhbz#1070952


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-14
changelog:
  - RHEL-6.6 erratum
    - SSSD: fixed netgroup filter patch
    - SSSD: dropped serparate patch for #1006463, the fix is now part
      of the netgroup filter patch
    Resolves: rhbz#1006463
    Resolves: rhbz#1083064


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-15
changelog:
  - RHEL-6.6 erratum
    - SSSD: dropped the ipahostnameshort patch, as it is not
      needed. rhbz#1033703 is a configuration issue.
    Related: rhbz#1033703


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-16
changelog:
  - RHEL-6.7 erratum
    - added zlib-devel build required to enable zlib compression support
    - fixed two typos in the sudoers.ldap man page
    - fixed a hang when duplicate nss entries are specified in nsswitch.conf
    - SSSD: implemented sorting of the result entries according to the
            sudoOrder attribute
    - LDAP: fixed logic handling the computation of the "user matched" flag
    - fixed restoring of the SIGPIPE signal in the tgetpass function
    - fixed listpw, verifypw + authenticate option logic in LDAP/SSSD
    Resolves: rhbz#1106433
    Resolves: rhbz#1138267
    Resolves: rhbz#1147498
    Resolves: rhbz#1138581
    Resolves: rhbz#1142122
    Resolves: rhbz#1094548
    Resolves: rhbz#1144448


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-17
changelog:
  - RHEL-6.7 erratum
    - added patch for CVE-2014-9680
    - added BuildRequires for tzdata
    Resolves: rhbz#1200253


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-19
changelog:
  - RHEL-6.7 erratum
    - modified the authlogicfix patch to fix #1144448
    - fixed a bug in the ldapusermatchfix patch
    Resolves: rhbz#1144448
    Resolves: rhbz#1142122


author: Marek Grac <mgrac@redhat.com> - 1.1.12-4
changelog:
  - Localization problem at startup
  - Extending LV creates a duplicate entry in /etc/fstab
  - Cannot start due to missing module gnome 
  - Resolves: rhbz#579055 rhbz#586554 rhbz#585501


author: Marek Grac <mgrac@redhat.com> - 1.1.12-5
changelog:
  - Modification of volume size fails
  - Update localization for supported languages
  - Resolves: rhbz#585845 rhbz#584985


author: Marek Grac <mgrac@redhat.com> - 1.1.12-6
changelog:
  - system-config-lvm spec file cleanups
  - Modification of volume size fails
  - Resolves: rhbz#604174 rhbz#603770


author: Marek Grac <mgrac@redhat.com> - 1.1.12-12
changelog:
  - Displays Logical Volumes without filesystem under 'Unitialized'
  - Resolves: rhbz#791153
  - s-c-lvm traceback on parsing "dmsetup ls" output 
  - Resolves: rhbz#815921


author: Marek Grac <mgrac@redhat.com> - 1.1.12-13
changelog:
  - s-c-lvm crash after startup on machine with many LV
  - Resolves: rhbz#840070
  - s-c-lvm crash when encounter RAID 1 created in LVM
  - Resolves: rhbz#852864
  - s-c-lvm crash on mirrored LV with mirrorlog
  - Resolves: rhbz#852864


author: Marek Grac <mgrac@redhat.com> - 1.1.12-14
changelog:
  - s-c-lv crash after startup on machine with many LV
    Resolves: rhbz#840070
  - s-c-lvm crash when encounter RAID1 created in LVM
    Resolves: rhbz#852864


author: Marek Grac <mgrac@redhat.com> - 1.1.12-17
changelog:
  - s-c-lvm crases with thin volumes
    Resolves: rhbz#878253
  - s-c-lvm GUI can not be opened from some OS
    Resolves: rhbz#953071
  - s-c-lvm does not allow online extend of ext3 fs
    Resolves: rhbz#1029755


author: Michael A. Peters <mpeters@mac.com> - 2005-0.5
changelog:
  - Fixed perl scripts in TEXMF/scripts that thought it would be cute
  - to not use a proper shell bang
  -
  - Install an rpm macro file for building the binary package


author: Michael A. Peters <mpeters@mac.com> - 2005-0.6
changelog:
  - Attempting to comply with FHS guidelines.
  -  install a rpm macro file so that texjive binary package always uses
  -  the same directories for texmf, texmf-config, texmf-var
  - Filter out requires for perl(only) and perl(path_tre)


author: Michael A. Peters <mpeters@mac.com> - 2005-0.9
changelog:
  - some cleanup work on directory ownership
  - added missing dstroke package
  - added texmf tree for vendor bolt-on packages
  -
  - commented out perl script fix noted in 2005-0.5 changelog
  -  until it can be investigated further (and fixed with patch instead)


author: Jindrich Novy <jnovy@redhat.com> - 2007-0.1.20070212rc
changelog:
  - update to TeXLive 2007 release candidate as of 12th Feb
  - don't package cslatex in separate tarballs
  - fix backups for patches 0, 7
  - unzip files quietly
  - package cnf files in texmf/web2c correctly
  - package new files for conTeXt
  - forwardport TeXLive-2005 patches
  - rpmlint fixes


author: Jindrich Novy <jnovy@redhat.com> - 2007-0.2
changelog:
  - update to official TeXLive release
  - don't use dates in upstream tarball names
  - remove texlive-errata dependencies


author: Jindrich Novy <jnovy@redhat.com> - 2007-0.4
changelog:
  - reintroduce the texlive-errata scheme
  - remove old texjive lists and generate the texmf archive lists
    from scheme-tetex.tpm automatically
    (collection-xetex was added manually to scheme-tetex.tpm because
    the texmf tree is incomplete -> fmtutil --all complains)
  - fix all filelists to reflect the change above
  - fix empty document creation


author: Jindrich Novy <jnovy@redhat.com> - 2007-0.5
changelog:
  - generate new complete style list based on styles in teTeX
    exclusively, regardless the upstream scheme-tetex
    (srpm size reduced from 280M -> 180M for texmf tree)
  - add new hyphenations that weren't present, add latex-fonts,
    latexconfig, etc. to regenerate all fmts successfully


author: Jindrich Novy <jnovy@redhat.com> - 2007-0.8
changelog:
  - add bin-tex, bin-xetex, bin-omega, bin-aleph, bin-metafont
  - remove sources lists and tpms from the texmf tarball
  - install texmf tree in a less hackish way, update texmf macro definitions
  - update updmap default configuration, move updmap.cfg to sysconfdir


author: Jindrich Novy <jnovy@redhat.com> - 2007-0.9
changelog:
  - obsolete tetex-eurofont, it's a part of TeXLive
  - properly obsolete teTeX
  - update license tag (some styles/fonts need yet to be removed,
    licenses discussed upstream)
  - sort the zip list


author: Jindrich Novy <jnovy@redhat.com> - 2007-0.10
changelog:
  - add bin-dvipsk, bin-bibtex, bin-amstex, bin-cyrillic, bin-cslatex,
    bin-cweb, bin-dvipdfmx, bin-dvicopy, bin-pstools, bin-texware,
    bin-thumbpdf, bin-web, bin-ttfutils (these contain man pages and
    config files for packaged binaries)
  - legal cleanup: remove literat, latex-tipps-und-tricks, fancybox,
    URW fonts with bad licenses and pcatcode from amscls


author: MATSUURA Takanori <t.matsuu at gmail.com> - 2007-0.10.2
changelog:
  - add Japanese pTeX
  - move Polish platex and pdfplatex are moved to platex-pl and
    pdfplatex respectively.
  - add ghostscript dependency and symbolic links to the cmap
    files. required for dvipdfmx


author: Jindrich Novy <jnovy@redhat.com> - 2007-0.11
changelog:
  - XDvi config file is owned only by one subpackage (thanks to S.Umar)
  - declare config files as config(noreplace)
  - BR ghostscript
  - ship separate ls-R when japanese is enabled


author: Jindrich Novy <jnovy@redhat.com> - 2007-0.13
changelog:
  - move configuration files to the main texlive package
  - remove useless common subpackage and move its content to main package
  - increase default texmf.cnf limits so that xmlto works
  - don't call install-info in scriptlets if it doesn't exist
  - fix some multiple file ownerships
  - update ptex-texmf to 2.5
  - use xdg-utils and htmlview in tkdefaults


author: Jindrich Novy <jnovy@redhat.com> - 2007-2
changelog:
  - don't conflict with tetex-doc (#413141)
  - remove tex4ht from texlive, it's packaged separately (#411501)


author: Jindrich Novy <jnovy@redhat.com> - 2007-5
changelog:
  - remove preview, it is to be packaged separately (#425805)
  - add japanese ptex fmtutil configuration, thanks to Patrice Dumas
  - update texlive-texmf-fonts package description to reflect
    texlive and texlive-fonts merge (related: #426388)


author: Jindrich Novy <jnovy@redhat.com> - 2007-10
changelog:
  - BR: texinfo-tex
  - package Japanese separately -> texlive-texmf-japanese
  - prevent packaging patch backups
  - correct directory/file permissions in less wasteful way to
    increase build speed
  - run only brp-compress


author: Jindrich Novy <jnovy@redhat.com> - 2007-12
changelog:
  - package bigfoot, erroneously missing from the original
    TeX Live 2007 (#426507)
  - remove references to cm-super fonts from map files to make
    dvips work correctly (#431182)
  - package ConTeXt separately to texlive-texmf-context to get
    rid of the ruby dependency
  - move from bz2 to lzma to save space
  - move font stuff out of the dvips subpackage


author: Jindrich Novy <jnovy@redhat.com> - 2007-13
changelog:
  - ship config file for dvipdfm (#434165), thanks to Patrice Dumas
  - obsolete/provide tetex-lineno (#426929)


author: Jindrich Novy <jnovy@redhat.com> - 2007-14
changelog:
  - rename texlive-texmf-japanese to texlive-texmf-east-asian
  - use better approach in installation of cmap files for dvipdfmx
    (#418091), thanks to Patrice Dumas
  - drop useless ghostscript Requires from texlive-texmf-fonts,
    drop xdg-utils Requires from texlive-texmf (#428489)


author: Jindrich Novy <jnovy@redhat.com> - 2007-15
changelog:
  - require texlive-texmf in texlive-texmf-fonts (#431255)
  - add missing post/postun scriptlets for texlive-texmf-latex
  - require tex-preview


author: Jindrich Novy <jnovy@redhat.com> - 2007-16
changelog:
  - update texlive package list to ship complete upstream XeTeX
    TeXLive distribution
  - introduce new texlive-texmf-xetex subpackage
  - move context bits to its subpackage, add missing styles from
    upstream collection-context


author: Jindrich Novy <jnovy@redhat.com> - 2007-17
changelog:
  - add styles from upstream collection-latexextra to have more
    complete LaTeX distribution (#436180)
  - move tex-preview dependency to texlive-texmf-latex (#436699)
  - remove tex4ht completely from lists
  - regenerate ls-Rs


author: Jindrich Novy <jnovy@redhat.com> - 2007-18
changelog:
  - run restorecon in fonts subpackage to fix bad SELinux contexts
  - require coreutils for post (#437457)


author: Jindrich Novy <jnovy@redhat.com> - 2007-24
changelog:
  - fix rendering of beamer slides (#457836)
  - remove ubbold.fd (#458150), thanks to Jason Cross
  - fix broken Euro sign (#459332) and Romanian accent (#460266),
    thanks to Vasile Gaburici


author: Jindrich Novy <jnovy@redhat.com> - 2007-26
changelog:
  - increase limits in texmf.cnf so that PostgreSQL documentation build
    passes (#460982)
  - update to texlive-2008 version of envlab


author: Jindrich Novy <jnovy@redhat.com> - 2007-27
changelog:
  - remove binaries from splitindex (#476636)
  - add unowned dirs into the filelist (#474027)
  - fix patch to brp-compress script (#468179)
  - remove F8 related chunks from spec


author: Jindrich Novy <jnovy@redhat.com> 2007-31
changelog:
  - do not conflict with dvipdfm
  - update perl requires filter
  - update latin.ldf (#469948)
  - do not provide any perl dependencies (#516350)


author: Tom "spot" Callaway <tcallawa@redhat.com> 2007-32
changelog:
  - resolve conflict between texlive-texmf (and -doc) and tetex-perltex
  - resolve conflict between texlive-texmf and tetex-prosper
  - resolve conflict between texlive-texmf and tetex-perltex


author: Jindrich Novy <jnovy@redhat.com> 2007-34
changelog:
  - fix permissions of /var/lib/texmf/web2c (#512459, #531894)
  - add IEEEconf (#495877)
  - update achemso (#521459)
  - update perltex to 2.0 from CTAN
  - obsolete tetex-perltex


author: Jindrich Novy <jnovy@redhat.com> 2007-36
changelog:
  - allow to make LaTeX format from source more than 5 years old
    (it gives a warning instead of an error)
    http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=531569#56


author: David Hill <djh[at]ii.net>
changelog:
  - update to latest CVS (0.4a)
  - update Enigmail to 0.82.2
  - alter mozconfig for new build requirements
  - add missing BuildReq (#987)


author: Warren Togami <warren@togami.com> 0:0.4-0.fdr.3
changelog:
  - open-browser.sh release 3
  - patch broken /usr/bin/mozilla script during install
  - dir ownership
  - XXX: Source fails build on x86_64... fix later


author: David Hill <djh[at]ii.net> 0:0.5-0.fdr.1
changelog:
  - update Enigmail to 0.83.3
  - use official source tarball (after removing the CRLFs)
  - package renamed to thunderbird


author: David Hill <djh[at]ii.net> 0:0.5-0.fdr.4
changelog:
  - add Mozilla x86_64 patch (Oliver Sontag)
  - Enigmail source filenames now include the version
  - modify BuildRoot


author: David Hill <djh[at]ii.net> 0:0.5-0.fdr.6
changelog:
  - update open-browser script, modify BuildRequires (Warren)
  - add Blizzard's x-remote patch
  - initial attempt at x-remote-enabled startup script


author: David Hill <djh[at]ii.net> 0:0.5-0.fdr.8
changelog:
  - minor improvements to open-browser.sh and startup script
  - update to latest version of Blizzard's x-remote patch


author: David Hill <djh[at]ii.net> 0.6-0.fdr.0.20040415
changelog:
  - update to latest CVS, update mozconfig and %build accordingly
  - update to Enigmail 0.83.6
  - remove x-remote and x86_64 patches
  - build with -Os


author: David Hill <djh[at]ii.net> 0.6-0.fdr.3
changelog:
  - installation directory now versioned
  - allow root to run the program (for installing extensions)
  - remove unnecessary %pre and %post
  - remove separators, update mozconfig and launch script (M. Schwendt, #1460)


author: David Hill <djh[at]ii.net> 0.7-0.fdr.0
changelog:
  - update to 0.7
  - temporarily disable Enigmail 0.84.1, make ftp links work (#1634)
  - specify libdir, change BR for apt (V. Skyttä, #1617)


author: David Hill <djh[at]ii.net> 0.7-0.fdr.1
changelog:
  - re-enable Enigmail 0.84.1
  - add gcc-3.4 patch (Kaj Niemi)
  - use official branding (with permission)


author: David Hill <djh[at]ii.net> 0.7.2-0.fdr.0
changelog:
  - update to 0.7.2, just because it's there
  - update gcc-3.4 patch (Kaj Niemi)
  - add EM registration patch and remove instdir hack


author: David Hill <djh[at]ii.net> 0.7.3-0.fdr.1
changelog:
  - update to Thunderbird 0.7.3 and Enigmail 0.85.0
  - remove XUL.mfasl on startup, add Debian enigmail patches
  - add Xvfb hack for -install-global-extension


author: Warren Togami <wtogami@redhat.com> 0.7.3-3
changelog:
  - rawhide import
  - apply NetBSD's freetype 2.1.8 patch
  - apply psfonts patch
  - remove BR on /usr/bin/ex, breaks beehive


author: Christopher Aillon <caillon@redhat.com> 0.8.0-1
changelog:
  - Update to 0.8.0
  - Remove enigmail
  - Update BuildRequires
  - Remove gcc34 and extension manager patches -- they are upstreamed.
  - Fix for gnome-vfs2 error at component registration


author: Christopher Blizzard <blizzard@redhat.com> 0.8.0-8
changelog:
  - Pull over patches from firefox build:
    - disable default application dialog
    - don't include software update since it doesn't work
    - make external app support work


author: Christopher Aillon <caillon@redhat.com> 1.0.2-3
changelog:
  - Don't have downloads "disappear" when downloading to desktop (#139015)
  - Fix for some more cursor issues in textareas (149991, 150002, 152089)
  - Add upstream patch to fix bidi justification of pango
  - Add patch to fix launching of helper applications
  - Add patch to properly link against libgfxshared_s.a
  - Fix multilib conflicts


author: Kristian Høgsberg <krh@redhat.com> 1.0.2-7
changelog:
  - Add firefox-1.0-pango-cairo.patch to get rid of the last few Xft
    references, fixing the "no fonts" problem.


author: Christopher Aillon <caillon@redhat.com> - 1.5-0.5.3.rc1
changelog:
  - Once again, disable ppc64 because of a new issue.
    See https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=175944

  - Use the system NSS libraries
  - Build on ppc64


author: Christopher Aillon <caillon@redhat.com> - 1.5-0.5.6.rc1
changelog:
  - Fix crash when deleting highlighted text while composing mail within
    plaintext editor with spellcheck enabled.


author: Christopher Aillon <caillon@redhat.com> - 1.5.0.5-5
changelog:
  - Update nopangoxft.patch
  - Fix rendering of MathML thanks to Behdad Esfahbod.
  - Update start page text to reflect the MathML fixes.
  - Enable pango by default on all locales
  - Build using -rpath
  - Re-enable GCC visibility


author: Christopher Aillon <caillon@redhat.com> - 1.5.0.7-2
changelog:
  - Fix crash when changing gtk key theme
  - Prevent UI freezes while changing GNOME theme
  - Remove verbiage about pango; no longer required by upstream.


author: Christopher Aillon <caillon@redhat.com> 1.5.0.8-1
changelog:
  - Update to 1.5.0.8
  - Allow choosing of download directory
  - Take the user to the correct directory from the Download Manager.
  - Patch to add support for printing via pango from Behdad.


author: Christopher Aillon <caillon@redhat.com> 1.5.0.9-7
changelog:
  - Updated cursor position patch from tagoh to fix issue with "jumping"
    cursor when in a textfield with tabs.


author: Christopher Aillon <caillon@redhat.com> 2.0.0.0-0.5.rc1
changelog:
  - Fix the desktop file
  - Clean up the files list
  - Remove the default client stuff from the pref window


author: Christopher Aillon <caillon@redhat.com> 2.0.0.6-4
changelog:
  - Fix crashes when using GTK+ themes containing a gtkrc which specify 
    GtkOptionMenu::indicator_size and GtkOptionMenu::indicator_spacing


author: Jan Horak <jhorak@redhat.com> - 3.0-2.beta2
changelog:
  - Fixed clicked link does not open in browser (#489120)
  - Fixed missing help in thunderbird (#488885)


author: Remi Collet <fedora@famillecollet.com> - 3.1.6-8
changelog:
  - fix cairo + nspr required version
  - lightning: fix thunderbird version required
  - lightning: fix release (b3pre)
  - lightning: clean install


author: Christopher Aillon <caillon@redhat.com> - 3.1.9-7
changelog:
  - Make gvfs-open launch a compose window (salimma)
  - Spec file cleanups (salimma, caillon)
  - Split out mozilla crashreporter symbols to its own debuginfo package (caillon)


author: Jan Horak <jhorak@redhat.com> - 8.0-2
changelog:
  - Enable Mozilla's crash reporter again for all archs
  - Temporary workaround for langpacks
  - Disabled addon check UI (#753551)


author: Martin Stransky <stransky@redhat.com> - 14.0-4
changelog:
  - Removed StartupWMClass (rhbz#844863)
  - Fixed -g parameter
  - Removed thunderbird-devel before packing to avoid debugsymbols duplicities (rhbz#823940)


author: Martin Stransky <stransky@redhat.com> - 24.2.0-4
changelog:
  - Fixed rhbz#1024232 - thunderbird: squiggly lines used 
    for spelling correction disappear randomly


author: Erik Troan <ewt@redhat.com>
changelog:
  - added man page to package
  - uses a buildroot and %attr
  - fixed error message generation for directories
  - fixed flag propagation


author: Preston Brown <pbrown@redhat.com>
changelog:
  - I am the new maintainer
  - fixed cleanup of directories
  - added --quiet flag
  - freshen manpage
  - nice patch from Kevin Vajk <kvajk@ricochet.net> integrated


author: Paul Gear <paulgear@bigfoot.com>
changelog:
  - HP-UX port (including doco update)
  - Tweaked Makefile to allow installation into different base directory
  - Got rid of GETOPT_... defines which didn't do anything, so that short
    equivalents for all long options could be defined.
  - Fixed bug in message() where 'where' file handle was set but unused
  - Changed most fprintf() calls to message()


author: Preston Brown <pbrown@redhat.com>
changelog:
  - support for CTIME from jik@kamens.brookline.ma.us
  - fixes for fuser checks from Ian Burrell <iburrell@digital-integrity.com>.
  - remove directories when empty without --all flag, to be consistent w/docs.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - use execle() instead of system() to get the correct return code, fixes from
    Jeremy Katz <katzj@linuxpower.org>


author: Preston Brown <pbrown@redhat.com>
changelog:
  - Patch from enrico.scholz@informatik.tu-chemnitz.de allows concurrent 
    usage of mtime, ctime, and atime checking (#19550).


author: Preston Brown <pbrown@redhat.com> 2.8-1
changelog:
  - added a "nodirs" option which inhibits removal of empty directories.
  - Integrated race condition fixes from Martin Macok (#50148)
  - do not try to remove ext3 journal files (#50522)


author: Mike A. Harris <mharris@redhat.com> 2.8.3-1
changelog:
  - Added support for large files with 64bit offsets by adding to CFLAGS
    -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 bug (#56961)


author: Mike A. Harris <mharris@redhat.com> 2.9.0-1
changelog:
  - Added Solaris/HPUX support to tmpwatch via patch from Paul Gear (#71288)
  - Rebuild in rawhide as 2.9.0-1


author: Miloslav Trmac <mitr@redhat.com> - 2.9.1-1
changelog:
  - Add --exclude, use it to preserve X socket directories (#107069)
  - Allow multiple directory arguments with relative paths (#91097)
  - Don't manually strip the binary


author: Miloslav Trmac <mitr@redhat.com> - 2.9.3-1
changelog:
  - Silently ignore ENOENT if somebody removes files faster than us (#154960)
  - Handle failures to exec fuser
  - Fix check for negative grace periods


author: Miloslav Trmac <mitr@redhat.com> - 2.9.6-1
changelog:
  - Add --exclude-user (original patch by Brett Pemberton)
  - Fix too long line in /etc/cron.daily/tmpwatch


author: Miloslav Trmac <mitr@redhat.com> - 2.9.8-1
changelog:
  - Add optional unit suffix to the "hours" (now "time") parameter (original
    patch by Alan J Rosenthal <flaps@dgp.toronto.edu>)
  - Fix some format string vs. arguments mismatches
  - Fix some rpmlint warnings


author: Miloslav Trmac <mitr@redhat.com> - 2.9.9-1
changelog:
  - Exclude aquota.group and aquota.user files
    Resolves: 206258
  - Don't require the user-specified paths to be absolute


author: Miloslav Trmac <mitr@redhat.com> - 2.9.11-1
changelog:
  - Fix a misleading message in --test
    Resolves: 234596
  - Compress the tarball using bzip2
  - Move the cron.daily script to a separate source file


author: Miloslav Trmač <mitr@redhat.com> - 2.9.12-1
changelog:
  - Fix --nosymlinks description in the man page
  - Use the maximum of atime, mtime and ctime when checking whether a file is
    obsolete
    Resolves: #373301


author: Miloslav Trmač <mitr@redhat.com> - 2.9.13-1
changelog:
  - New home page at https://fedorahosted.org/tmpwatch/ .
  - tmpwatch is now licensed under GPLv2.
  - Address issues from reviews by Adel Gadllah and Jason Tibbitts:
    - Run (make) with %{?_smp_mflags}
    - Add a comment describing the origin of the tarball to the spec file
    - Use a better BuildRoot:


author: Miloslav Trmač <mitr@redhat.com> - 2.9.16-1
changelog:
  - Update to tmpwatch-2.9.16.
  - Exclude /tmp/hsperfdata_*.
    Resolves: #527425
  - Preserve timestamps where possible.


author: David Walluck <dwalluck@redhat.com> 0:6.0.16-1jpp.1.fc9
changelog:
  - use %{_initrddir} macro instead of %{_sysconfdir}/init.d (rhbz #153187)
  - fix java.library.path setting in %{name}.conf (rhbz #253605)
  - fix incorrect initscript output (rhbz #380921)
  - update initscript (rhbz #247077)
  - add logrotate support
  - fix strange-permission
  - fix %prep
  - replace /var with %{_var}
  - replace %{_localstatedir} with %{_var}
  - use %{logdir} where possible
  - call build-jar-repository with full path in scriptlets
  - remove file-based requires
  - build with icedtea and set as the default JAVA_HOME in %{name}.conf
  - fix non-standard-group
  - change ecj references to eclipse-ecj
  - change Apache Software License 2.0 to ASL 2.0 for rpmlint


author: David Walluck <dwalluck@redhat.com> 0:6.0.16-1jpp.2.fc9
changelog:
  - use %{_var} for appdir instead of /srv
  - use ${JAVACMD} for java executable in wrapper script
  - use built-in status function in initscript where possible
  - add missing require on procps for status function
  - fix java.library.path setting in %{_sysconfdir}/sysconfig/%{name}
  - add patch to document webapps in %{_sysconfdir}/%{name}/tomcat-users.xml
  - remove %{appdir}/ROOT/admin
  - move %{_bindir}/d%{name} to %{_sbindir}/d%{name}


author: David Walluck <dwalluck@redhat.com> 0:6.0.16-1jpp.6.fc9
changelog:
  - remove Requires: tomcat-native
  - put back original JPackage Group (except javadoc) and License tags
  - add Provides for jsp and servlet
  - use ant macro
  - build and install sample webapp
  - call /sbin/service to stop service on uninstall
  - remove references to $RPM_BUILD_DIR
  - use copy instead of move to fix short-circuit install build
  - remove prebuilt sample.war
  - remove Thumbs.db files
  - add Requires: java >= 0:1.6.0


author: David Walluck <dwalluck@redhat.com> 0:6.0.16-1jpp.7.fc9
changelog:
  - version jsp and servlet Provides with their spec versions
  - remove Obsoletes/Provides for servletapi6 package as it can co-exist
  - check for java-functions existence in wrapper script
  - move d%{name} to %{name} and create symlink for d%{name}
  - improve status function in initscript
  - change license to ASL 2.0 again as per Fedora guidelines


author: David Walluck <dwalluck@redhat.com> 0:6.0.18-1
changelog:
  - 6.0.18
  - Resolves: CVE-2008-1232, CVE-2008-1947, CVE-2008-2370, CVE-2008-2938
  - fix definition of java.security.policy with d%{name} start-security
  - don't pass $CATALINA_OPTS with d%{name} stop
  - redefine tempdir and workdir for tmpwatch workaround
  - change eclipse-ecj references to ecj


author: David Walluck <dwalluck@redhat.com> 0:6.0.18-2
changelog:
  - remove initscripts and /sbin/service requirement
  - call initscript directly without using /sbin/service
  - require /sbin/chkconfig instead of chkconfig
  - remove chkconfig requirement from packages that don't require it


author: David Knox <dknox@redhat.com> 0:6.0.24-3
changelog:
  - Removed prerun lib and post WEB-INF/lib. Moved build-jar-repos to
  - after the installs. Added Requires and BuildRequires for jakarta-
  - commons-{dbcp,pool,collections}-tomcat5 and ecj. Changed define macro to
  - global.


author: David Knox <dknox@redhat.com> 0:6.0.24-11
changelog:
  - Resolves: rhbz#584699 initscript collected problems LSB
  - compliant. Not complete yet. Return values are correct and 
  - usage function has been implemented.


author: David Knox <dknox@redhat.com> 0:6.0.24-12
changelog:
  - Resolves: rhbz#584699. A respin was required to fix post and
  - postun for el. Updated EL-spec to 2.1 from 1.0. Tomcat6 uses 
  - elspec 2.1


author: David Knox <dknox@redhat.com> 0:6.0.24-18
changelog:
  - Resolves: rhbz# 661244 missing tomcat6-juli link
  - Fixed symlinks to commons-collections and log4j in libdir
  - Removed log4j package


author: David Knox <dknox@redhat.com> 0:6.0.24-23
changelog:
  - Resolves: rhbz 678671 - useradd sets shell to nologin
  - dangling symlink for log4j. Added it as R: and R(post)


author: David Knox <dknox@redhat.com> 0:6.0.24-25
changelog:
  - Installed permissions do not allow tomcat to start
  - incrementing NVR so yum won't get confused with the zstream


author: David Knox <dknox@redhat.com> 0:6.0.24-28
changelog:
  - Resovles  rhbz#695284 - wrapper logs to different locations
  - CVE-2010-4172, CVE-2011-0013, CVE-2010-3718 commented out 
  - until needed.


author: David Knox <dknox@redhat.com> 0:6.0.24-29
changelog:
  - Resolves: rhbz#656403, rhbz#675926, rhbz#676011
  - CVE-2010-4172, CVE-2010-3718, CVE-2011-0013, CVE-2010-4476,
  - CVE-2011-0534


author: David Knox <dknox@redhat.com> 0:6.0.24-37
changelog:
  - resolves: cve-2011-3190 rhbz 738504
  - resolves: cve-2011-2204 rhbz 738504
  - resolves: cve-2011-2526 rhbz 738504
  - resolves: cve-2011-1184 rhbz 738504
  - resolves: rhbz 698624 - revisited


author: David Knox <dknox@redhat.com> 0:6.0.24-38
changelog:
  - resolves: rhbz 748813 NPE w/no data in chunked POST request
  -  Not included in 6.2. Slated for 6.3


author: David Knox <dknox@redhat.com> 0:6.0.24-41
changelog:
  - Resolves: rhbz 782400 - remove redhat-lsb dependency
  - Resolves: rhbz 726169 (783407) - Unable to compile class for JSP
  - Resolves: rhbz 783567 - tag attributes parsing throws exception


author: David Knox <dknox@redhat.com> 0:6.0.24-46
changelog:
  - Resolves: rhbz 847288 classloader deadlock compiler JSPs
  - Resolves: rhbz 785954 HTML filtering needed
  - Resolves: rhbz 798617 init gives incorrect status


author: David Knox <dknox@redhat.com> 0:6.0.24-48
changelog:
  - Resolves: rhbz 576540 - regression init script in the 
  - wrong place. Changed _initrddir definition herein to point to the 
  - right place.


author: David Knox <dknox@redhat.com> 0:6.0.24-51
changelog:
  - Related: rhbz#955977 CVE-2013-1976 Changed location of 
  - TOMCAT_LOG to /var/log where only root can write to it. Touching
  - TOMCAT_LOG is no longer necessary


author: David Knox <dknox@redhat.com> 0:6.0.24-54
changelog:
  - Resolves: rhbz 845786 webapps-docs contained empty files. 
  - Build will fail of architectures ppc s390x ppc64. Use
  - target rhel-6.5-noarch-candidate
  - Resolves: rhbz 915447 can't start with group other than tomcat
  - changes in init script
  - Resolves: rhbz 950647 Error in checkpidfile of init script
  - Resolves: rhbz 977685 Full implementation of juli and juli
  - adapters. Jars placed in new extras directory
  - Resolves: 960225 Status script does not return proper PID


author: David Knox <dknox@redhat.com> 0:6.0.24-58
changelog:
  - Resolves: CVE-2012-3439
  - Resolves: CVE-2012-4534
  - Resolves: CVE-2012-3546
  - Increment build number to exceed 6_4 build number. Demanded
  - by rpmdiff


author: David Knox <dknox@redhat.com> 0:6.0.24-60
changelog:
  - Related: rhbz 915447 can't start with group other than tomcat
  - changes in init script. Added TOMCAT_GROUP to sysconfig and
  - tomcat6.conf. Also changed default to the group that user
  - tomcat belongs.


author: David Knox <dknox@redhat.com> 0:6.0.24-80
changelog:
  - Related: CVE-2013-4590  - remove xml schema names javaee_5,
  - javaee_web_services_1_2, and javaee_web_services_1_2_client
  - from descriptor.DigesterFactory initialization. These
  - schema definitions are not relevant to 6.0.24 as the version
  - of their spec did not exist at the time.
  - Resolves: rhbz#1140855 - request parameter truncated


author: David Knox <dknox@redhat.com> 0:6.0.24-81
changelog:
  - Resolves: rhbz#1183252 Tomcat breaks in serving large files
  - greater than 1.7 mb and under high load and high threading


author: David Knox <dknox@redhat.com> 0:6.0.24-84
changelog:
  - Resolves: rhbz#1022061 Tomcat init script needs to be adjusted to kill tomcat
  - if stop is unsuccessful


author: David Knox <dknox@redhat.com> 0:6.0.24-88
changelog:
  - Related: rhbz#1022061 changed in init file. Remove test
  - in function stop for result after initial command to
  - stop.


author: Phil Knirsch <pknirsch@redhat.com> - 0.1.1-1
changelog:
  - Bump version
  - Added comment in empty __init__.py files
  - Fixed BuildRoot tag to use latest recommendation of FPG
  - Lots of whitespace changes
  - Some minor README changes
  - Added a changelog rule in Makefile
  - Fixed rpmlint error messages
  - Add init() methods to each plugin
  - Call plugin init() methods during tuned's init()
  - Add support for command line parameters
        o -c conffile|--config==conffile to specify the location of the config file
        o -d to start tuned as a daemon (instead of as normal app)
  - Readded the debug output in case tuned isn't started as as daemon
  - Fixed initialization of max transfer values for net tuning plugin
  - Added complete cleanup code in case of tuned exiting and/or
    getting a SIGTERM to restore default values
  - Made the disk tuning pluging less nosy if started as non-daemon
  - Fixed missing self. in the tuned.py config handling
  - Added a manpage
  - Fixed summary
  - Added missing GPL notic to tuned.py
  - Added explanation for Source entry in specfile
  - Added a distarchive target for the Makefile for proper tagging in git
  - Added a explanation how to create the tarball via git in the specfile
  - Fixed the defattr() lines in the specfile to conform FRG


author: Phil Knirsch <pknirsch@redhat.com> - 0.1.2-1
changelog:
  - Added config file option to enable/disable plugins
  - Switched from ConfigParser to RawConfigParser
  - Renamed doc/README.txt to doc/DESIGN.txt
  - Added tuned.conf man page
  - Updated tuned man page
  - Updated package descriptions (#487312)
  - Added documentation for utils scripts (#487312)


author: Phil Knirsch <pknirsch@redhat.com> - 0.1.5-1
changelog:
  - Updated documentation, thanks to Marcela Maslanova!
  - Updated diskdevstat and netdevstat to have command line arguments
  - Added the possibility to output a histogram at the end of the
    run for detailed information about the collected data


author: Phil Knirsch <pknirsch@redhat.com> - 0.2.1-1
changelog:
  - Added first set of profiles
  - Added tuned-adm tool for profile switching
  - Fixed several issues with the tuned-adm tool


author: Phil Knirsch <pknirsch@redhat.com> 0.2.2-1
changelog:
  - Updates to the ktune scripts
  - Added support for start/stop of the ktune scripts and ktune initscript


author: Phil Knirsch <pknirsch@redhat.com> 0.2.5-1
changelog:
  - Moved from prerelease to normal
  - Added missing ethtool requires
  - Fixed 532209 - init priority wrong for ktune (Jan Vcelak)
  - Fixed 530457 - [abrt] crash detected in tuned-0.2.5-0.1.fc12 (Jan Vcelak)
  - Added detection of netcard supported speeds (Jan Vcelak)
  - Fix ktune.sh script for stopping in regard to ALPM and CDROM polling (Phil Knirsch)


author: Phil Knirsch <pknirsch@redhat.com> 0.2.6-1
changelog:
  - Included Jan Vcelak's patch for pyo and pyc files
  - Updated ktune.sh script for laptop-battery-powersave profile with latest
    ALPM mechanism
  - Fixed ktune.sh script for laptop-battery-powersave profile to stop printing
    errors when files in /sys are missing


author: Thomas Woerner <twoerner@redhat.com> 0.2.7-1
changelog:
  - Updated ktune to version 0.4-1
    - Supports start and stop options in profile scripts calls
    - Fixed CMDLINE_ELEVATOR test (rhbz#496940#c9)


author: Jan Vcelak <jvcelak@redhat.com> 0.2.7-2
changelog:
  - Fixed 542305 - [abrt] crash detected in tuned-0.2.5-2.fc12
    Some ethernet cards are not supported by 'ethtool'.


author: Jan Vcelak <jvcelak@redhat.com> 0.2.8-2
changelog:
  - Included Thomas Woerner's patch checking user rights when executing
    ktune service commands.
  - Included Jan Vcelak's patch fixing logging module initialization.


author: Phil Knirsch <pknirsch@redhat.com> 0.2.11-1
changelog:
  - Added support for display of currently active profile
  - Fix missing help command
  - Large update to documentation and manpages
  - Updated several of the profiles
  - Updated ALPM powersave code in the various powersave profiles
  - Disabled USB autosuspend in laptop-battery-powersave for now


author: Jan Vcelak <jvcelak@redhat.com> 0.2.11-3
changelog:
  - Fixes #577971 - error: "net.bridge.bridge-nf-call-ip6tables" is an unknown key (Thomas Woerner)
  - Fixes #588739 - tuned should not apply /etc/sysctl.ktune settings (Jan Vcelak)


author: Jan Vcelak <jvcelak@redhat.com> 0.2.11-4
changelog:
  - Fixes #596817 - spindown-disk profile requires hciconfig
    problematic profile was completely removed


author: Jan Vcelak <jvcelak@redhat.com> 0.2.11-5
changelog:
  - Fixes #605217 - tuned-adm unsafe profiles loading
    tuned-adm tool updated to the newest upstream version


author: Jarod Wilson <jarod@redhat.com> 0.2.11-8
changelog:
  - Don't touch transparent hugepage or cpufreq settings if not supported (#621877)
  - Add new enterprise-storage profile based on throughput-performance:
    * Disables barriers for all non-root non-/boot file systems (#624736)
    * Increases the default readahead value from 128kb to 512kb (#624828)


author: Jan Vcelak <jvcelak@redhat.com> 0.2.19-1
changelog:
  - reduced FSB support on Asus EEE netbooks with Intel Atom
  - consolidate ktune script functions in tuning profiles
  - disable tuned daemon on s390/s390x architectures
  - set readahead by multiplying previous setting
  - udev rules and script for CFQ and multipath devices scheduler tuning
  - fix hal-disable-polling if no CD drives present
  - added support for architecture-specific configuration files
  - special sysctl setting for s390x arch in 'throughtput-performance' profile
  - overall profiles update
  - 'tuned-adm active' shows status of tuned and ktune services as well
  - proper configuration files setup after fresh instalation
  - tuned-utils: added license text
  - bash completion support
  - tuned-adm: profile validity check
  - Fixed 577983 - AttributeError: Nettool instance has no attribute 'interface'


author: Jan Vcelak <jvcelak@redhat.com> 0.2.19-2
changelog:
  - add missing man pages (#625850)
  - update profiles description (#619812)
  - fix typos in laptop-battery-profile script
  - disable tuned powersaving in disk-spindown, *-performance and enterprise-storage


author: Thomas Wörner <twoerner@redhat.com> 0.2.19-5
changelog:
  - fixed handling of stdin/stdout/stderr during daemon creation (rhbz#695480)
  - fixed device type determination (rhbz#707079)


author: Jan Vcelak <jvcelak@redhat.com> 0.2.19-7
changelog:
  - fix: apply scheduler settings to vd* devices (#725497)
  - enhancement: add virtual-host profile (#740976)
  - enhancement: add virtual-guest profile (#740977)
  - fix: diskdevstat and netdevstat command line error handling (#747210)


author: Jan Vcelak <jvcelak@redhat.com> 0.2.19-8
changelog:
  - fix: poor ping latency in 'latency-performance' profile (#714180)
  - fix: ktune breaks disks when pecifying just the device for ELEVATOR_TUNE_DEVS (#784308)
  - fix: should not disable barriers on devices with write back cache (#801561)
  - fix: /var/run/tuned/tuned.pid created with insecure permissions (#845336)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 0.2.19-10
changelog:
  - fix: virtual-guest profile should not deploy the nobarrier option
    resolves: rhbz#886956
  - fix: disable transparent hugepages in latency-performance profile
    resolves: rhbz#887355


author: Jaroslav Škarvada <jskarvad@redhat.com> - 0.2.19-12
changelog:
  - fix: tuned incorrectly sets readahead values when new device is inserted
    resolves: rhbz#905077
  - fix: there is a race when multiple devices are inserted
    resolves: rhbz#904062


author: Jaroslav Škarvada <jskarvad@redhat.com> - 0.2.19-13
changelog:
  - add support for upstream THP
    resolves: rhbz#912788
  - added sap profile, backported features it needs
    resolves: rhbz#910838
  - made elevator settings customizable
    resolves: rhbz#987547
  - fixed usb_autosuspend and bluetooth functions
    resolves: rhbz#982756
  - increased kernel.sched_migration_cost in virtual-host profile
    resolves: rhbz#969491
  - documented virtual-guest and virtual-host profiles
    resolves: rhbz#964187
  - fixed typo in tuned-adm help
    resolves: rhbz#963821
  - modified latency-performance profile to lock CPU to C1
    resolves: rhbz#961792
  - added support for /etc/sysctl.d
    resolves: rhbz#959732
  - fixed permissions of /var/run/tuned/pmqos-static.pid
    resolves: CVE-2013-1820
  - fixed diskdevstat labels
    resolves: rhbz#885080
  - quiet errors when remounting FS with nobarriers
    resolves: rhbz#838512


author: Jaroslav Škarvada <jskarvad@redhat.com> - 0.2.19-15
changelog:
  - dynamically changing symlinks excluded from the RPM verification
    resolves: rhbz#1017366
  - reversed reading of sysctl configuration in SYSCTL_POST to follow
    RHEL-6 behavior
    resolves: rhbz#1036049
  - fixed typo in latency-performance profile regarding SYSCTL_POST
    resolves: rhbz#1064062
  - added support for s390 block devices (/dev/dasd)
    resolves: rhbz#1129936
  - added support for Xen VS devices (/dev/xvd)
    resolves: rhbz#1159963
  - increased vm.max_map_count in sap-netweaver profile
    resolves: rhbz#1174253


author: Jakub Jelinek <jakub@redhat.com> 2005g-2
changelog:
  - 2005g
    - fixes for Uruguay
  - include README and Theory from tzcode tarball in %{_docdir};
    Theory includes a good summary of how the timezone data files
    are supposed to be named


author: Jakub Jelinek <jakub@redhat.com> 2005m-2
changelog:
  - 2005m
    - changes for USA (extending DST by 4 weeks since 2007), Tunisia,
      Australia, Kazakhstan
    - historical timezone data changes for Japan, Poland, Northern Ireland and
      Mali
    - timezone name change for East Timor


author: Jakub Jelinek <jakub@redhat.com> 2005n-2
changelog:
  - 2005n
    - changes for Kyrgyzstan and Uruguay
  - fix a typo in the Makefile (used TZDATA env var instead of TZDIR during
    make check), update tst-timezone.c from glibc CVS (#172102)


author: Jakub Jelinek <jakub@redhat.com> 2005q-2
changelog:
  - 2005q
    - changes for Georgia, Azerbaijan, Jordan, Palestine, Cuba, Nicaragua
    - SystemV timezone changes


author: Petr Machata <pmachata@redhat.com> 2005r-2
changelog:
  - 2005r
    - Zones EST, MST, HST, EST5EDT, CST6CDT, MST7MDT, PST8PDT moved to
      northamerica to guard against old files with obsolete information
      being left in the time zone binary directory.
    - Changes for countries that are supposed to join 2007 US DST
      change.  This includes most of Canada, however entries already in
      the database (Alberta, British Columbia, Newfoundland, Northwest
      Territories, and Yukon) were left alone for the time being.
    - Fixes in zdump.c (abbrok): conditions are chained, and the string
      is checked for emptiness.


author: Petr Machata <pmachata@redhat.com> 2005r-3
changelog:
  - 2005r-3
    - Meta changes.  Renaming tzdata.tar.bz2 file to tzdata$ver-base,
      so that it won't clash across updates.


author: Petr Machata <pmachata@redhat.com> 2006a-1
changelog:
  - Upstream 2006a:
    - private.h(scheck): changing char* to char const*
    - Rule changes for Palestine, zone changes for Indiana/US, both
      changes for Canada.
    - Many related doc changes.
  - Naming scheme in spec file doesn't use %{name}, but tzdata.


author: Petr Machata <pmachata@redhat.com> 2006b-1
changelog:
  - Upstream 2006b:
    - using tz64code version, as 32 is legacy according to tzdata ML
    - new manual pages for ctime, strftime, tzset
    - some source code reorganizations
    - no timezone/dst rule updates


author: Petr Machata <pmachata@redhat.com> - 2006c-1
changelog:
  - Upstream 2006c
    - Time-related changes:
      - dozens of historical and commentary changes
      - Iran stopped observing DST
      - Sri Lanka switches from UTC+6 to UTC+5:30
      - America/Thule and America/Edmonton will adopt new US rules,
        starting 2007
      - Tunisia is adopting regular DST
    - Code:
      - asctime.c: Chages in format strings to silent gcc warnings
      - removing K&R notation from function signatures
      - few fixes across the code


author: Petr Machata <pmachata@redhat.com> - 2006d-1
changelog:
  - Upstream 2006d
    - Haiti observes DST
    - Sri Lanka change actually took effect Apr/15
    - All Canada is now scheduled for 2007 US DST rules
    - Some historical fixes


author: Petr Machata <pmachata@redhat.com> - 2006f-1
changelog:
  - Upstream 2006f
    - America/Guatemala observes DST between Apr/30 and Oct/1
    - Historical changes for Nicaragua
    - Update of America/Indiana/Vincennes in zone table


author: Petr Machata <pmachata@redhat.com> - 2006j-1
changelog:
  - Upstream 2006j
    - Honduras stopped observing DST on Monday at 00:00
    - America/Bermuda will follow the US's lead next year
    - America/Moncton will use US-style rules next year
    - New Zone America/Blanc-Sablon, for Canadians who observe AST all
      year
    - New zone: America/Atikokan instead of America/Coral_Harbour
    - New zones: Europe/Jersey, Europe/Guernsey, Europe/Isle_of_Man
    - Historical changes
    - Commentary updates
  - Upstream 2006i
    - localtime.c fixes
  - Upstream 2006h
    - zic leapsecond fix


author: Petr Machata <pmachata@redhat.com> - 2006l-1
changelog:
  - Upstream 2006k, 2006l:
    - Adjustments for Egypt, Palestine, Cuba, Honduras
    - Documentation changes


author: Petr Machata <pmachata@redhat.com> - 2006m-1
changelog:
  - Upstream 2006m:
    - Adjustments for Egypt, Palestine, Uruguay
    - Better description of `until' field in zic (8) manpage


author: Petr Machata <pmachata@redhat.com> - 2006m-2
changelog:
  - Proposed upstream patch (#210058)
    - Jordan will switch to winter time on October 27, not September 29
    - Brazil's DST this year is the first Sunday in November to the last
      Sunday in February.  (Thanks to Frederico A. C. Neves.)
    - ISO 3166 codes for Serbia and Montenegro, zone Europe/Podgorica
    - Commentary and past timestamps changes


author: Petr Machata <pmachata@redhat.com> - 2006p-1
changelog:
  - Upstream 2006p
    - Official version of Western Australia DST trial changes
    - Latitude/longitude changes for Europe/Jersey and Europe/Podgorica


author: Petr Machata <pmachata@redhat.com> - 2007a-1
changelog:
  - Upstream 2007a
    - Updates to Bahamas, they will be in sync with 2007 US DST change
    - New zone Australia/Eucla
    - Africa/Asmera renamed to Africa/Asmara, link created
    - Atlantic/Faeroe renamed to Atlantic/Faroe, link created
  - Packaging
    - Adding BuildRequires: glibc-common >= 2.5.90-7 to build tzdata
      with extended 64-bit format necessary for dates beyond 2037


author: Petr Machata <pmachata@redhat.com> - 2007c-1
changelog:
  - Upstream 2007c
    - Pulaski County, Indiana, switched back to eastern time.
    - Turkey switches at 01:00 standard time, not at 01:00 UTC.
  - Upstream 2007b
    - Changes to the commentary in "leapseconds".


author: Petr Machata <pmachata@redhat.com> - 2007d-1
changelog:
  - Upstream 2007d
    - Mongolia has abolished DST.
    - Turkey will use EU rules this year, changing at 01:00 UTC rather
      than 01:00 standard time.
    - Cuba observed DST starting Sunday.
    - Resolute, Nunavut switched from Central to Eastern time last
      November.


author: Petr Machata <pmachata@redhat.com> - 2007e-1
changelog:
  - Upstream 2007e
    - Syria switched to summer time at Mar/29.
    - Honduras will not enter DST this year.


author: Petr Machata <pmachata@redhat.com> - 2007f-1
changelog:
  - Upstream 2007f
    - New Zealand is extending DST, starting later this year.
    - Haiti no longer observes DST.
    - The Turks and Caicos switch at 02:00, not at 00:00, and have
      adopted US DST rules.


author: Petr Machata <pmachata@redhat.com> - 2007g-1
changelog:
  - Fix licensing tag.
  - Upstream 2007g
    - Egypt switches the September 7, not September 28
    - Daviess, Dubous, Knox, Martin, and Pike Counties, Indiana, switch
      from central to eastern time in November
    - South Australia, Tasmania, Victoria, New South Wales and Lord Howe
      Island are changing their DST rules effective next year
    - Sync several Antarctic station's rules with the New Zealand
    - leapseconds contain changes from the most recent IERS bulletin


author: Petr Machata <pmachata@redhat.com> - 2007h-1
changelog:
  - Upstream 2007h
    - Brazil will observe DST from 2007-10-14 to 2008-02-17
    - Egypt and Gaza switched earlier than we expected
    - Iran will resume DST next year
    - Venezuela is scheduled to change TZ to -4:30 on January 1


author: Petr Machata <pmachata@redhat.com> - 2007i-1
changelog:
  - Upstream 2007i
    - Syria DST will take place at Midnight between Thursday and Friday.
    - Cuba will end DST on the last Sunday of October.
  - Update tst-timezone.c from glibc CVS


author: Petr Machata <pmachata@redhat.com> - 2007j-1
changelog:
  - Upstream 2007j
    - New links America/St_Barthelemy and America/Marigot
    - Venezuela is changing their clocks on December 9 at 03:00


author: Petr Machata <pmachata@redhat.com> - 2008b-1
changelog:
  - Upstream 2008b
    - DST changes for Syria, Cuba; Iraq abandons DST
    - Saigon zone renamed Ho_Chi_Minh; backward link provided
    - Add America/Argentina/San_Luis information


author: Petr Machata <pmachata@redhat.com> - 2008c-1
changelog:
  - Upstream 2008c
    - Mongolia changes zone
    - Pakistan DST is scheduled until Sep/1, instead of Aug/31
  - Drop Morocco and Pakistan patches that are superseded by upstream
  - Fix a typo in Java subpackage name


author: Petr Machata <pmachata@redhat.com> - 2008e-1
changelog:
  - Upstream 2008e
    - Changes for Mauritius
    - Leap second coverage for 31/Dec 2008
    - Corrections of historical dates


author: Petr Machata <pmachata@redhat.com> - 2008f-1
changelog:
  - Upstream 2008f
    - Changes for Mauritius (extends DST to years to come)
    - Palestine changes clocks for the duration of Ramadan
    - Argentina will start DST on Sunday October 19, 2008
    - Brazil will start DST on 2008-10-19
  - Drop Pakistan and Morocco patches


author: Petr Machata <pmachata@redhat.com> - 2008h-1
changelog:
  - Upstream 2008h
    - Fix exact DST transition hour for Mauritius
    - Syria will leave the period of DST on Nov 1
    - Fix coordinates of Pacific/Niue


author: Petr Machata <pmachata@redhat.com> - 2008i-1
changelog:
  - Upstream 2008i
    - Updates for Argentina: Drop DST in zones America/Argentina/Jujuy,
      La_Rioja, San_Juan, Catamarca, Mendoza, Rio_Gallegos, Ushuaia; new
      zone America/Argentina/Salta (for provinces SA, LP, NQ, RN).


author: Petr Machata <pmachata@redhat.com> - 2009a-1
changelog:
  - Upstream 2009a
    - Fix Asia/Kathmandu spelling
    - Historical timestamps for Switzerland and Cuba
    - DST update for America/Resolute


author: Petr Machata <pmachata@redhat.com> - 2009d-1
changelog:
  - Upstream 2009d
    - Morocco will observe DST from 2009-06-01 00:00 to 2009-08-21 00:00
    - Tunisia will not observe DST this year.
    - Syria will start DST on 2009-03-27 00:00 this year
    - Cuba will start DST on midnight between 2009-03-07 and 2009-03-08
    - Province of San Luis, Argentina, went to UTC-04:00 on 2009-03-15


author: Petr Machata <pmachata@redhat.com> - 2009e-1
changelog:
  - Upstream 2009e
    - Historical changes for Jordan
    - Palestine will start DST on 2009-03-26 and end 2009-09-27
  - Egypt ends DST on 2009-09-24


author: Petr Machata <pmachata@redhat.com> - 2009f-1
changelog:
  - Upstream 2009f
    - Pakistan will observe DST between 2009-04-15 and (probably) 2009-11-01
  - Drop Pakistan patch


author: Petr Machata <pmachata@redhat.com> - 2009h-2
changelog:
  - Upstream 2009h
    - Convert use of 00:00 stamps to 24:00 of the previous day
    - Clarify that the data is Public Domain
  - Drop Cairo patch


author: Petr Machata <pmachata@redhat.com> - 2009k-1
changelog:
  - Upstream 2009k
    - Mauritius will not continue to observe DST the coming summer
    - Arbitrarily end DST at the end of 2009 so that a POSIX-style time
      zone string can appear in the Dhaka binary file


author: Petr Machata <pmachata@redhat.com> - 2009m-1
changelog:
  - Upstream 2009m
    - Palestine will will revert back to winter time on Friday, 2009-09-04
    - Samoa passed the DST Bill that fixes DST dates for 2009 and 2010
  - Drop Egypt patch


author: Petr Machata <pmachata@redhat.com> - 2009m-2
changelog:
  - Add markers for autoupdate of spec file
  - Pakistan leaves the period of DST on October 1 (tzdata-2009m-karachi.patch)


author: Petr Machata <pmachata@redhat.com> - 2009o-1
changelog:
  - Upstream 2009o
    - Bangladesh won't go back to Standard Time from October 1, 2009
    - Pakistan leaves DST on October 1, 2009
  - Dropped tzdata-2009m-karachi.patch
  - Argentina does not enter DST on October 18 (tzdata-2009o-argentinas.patch)


author: Petr Machata <pmachata@redhat.com> - 2010h-1
changelog:
  - Upstream 2009p
    - Argentina does not enter DST on October 18
    - San Luis switched from UTC-4 to UTC-3 on October 11th
  - Upstream 2009q
    - Change DST end in Syria from November 1 to last Friday in October
    - Changes to past Hong Kong transitions
    - Kemerovo oblast' in Russia will change current time zone on March 28, 2010.
      Asia/Novokuznetsk is the new time zone name
  - Upstream 2009r
    - Changes to local times of three Australian research stations in Antarctica
  - Upstream 2009s
    - Fiji plans to re-introduce DST from November 29th 2009 to April 25th 2010
  - Upstream 2009u
    - Bangladesh changed their clock back to Standard Time on December 31, 2009
  - Upstream 2010a
    - Source code cleanups
  - Upstream 2010b
    - Northern Mexico's border cities share the DST schedule with the
      United States
  - Upstream 2010c
    - Paraguay DST now in effect from 2nd Sunday of April to 1st Sunday
      of October
  - Upstream 2010d
    - The DST change in Bangladesh takes place a minute earlier
    - Fiji to end DST on 2010-03-28 at 03:00, about a month earlier
    - Samoa to observe DST this year; they didn't observe DST last year
    - DST in Chile extended to 3 April
  - Upstream 2010e:
    - Fix a typo in Bangladesh DST rule
  - Upstream 2010f:
    - Changes to Australian stations in Antarctica
    - Correct 2010 Samoa DST start date
    - New zone Antarctica/Macquarie
    - Change Syria DST start from last Friday in March to first Friday
      in April in 2010 and forward
  - Upstream 2010g:
    - No Bangladesh DST in 2010 and forward.
    - Gaza DST starts last Saturday in March at 12:01 a.m. in 2010 and forward
    - Kamchatka and Anadyr change to Moscow+8 on 2010-03-28
    - Samara changes to Moscow+0 on 2010-03-28
    - Related zone.tab updates
  - Upstream 2010h:
    - No DST in Tunisia in 2010 and forward
    - No DST in Pakistan in 2010 and forward
  - Dropped tzdata-2009o-argentinas.patch
  - Resolves: #568668 (DST time change in Paraguay [Asuncion])


author: Petr Machata <pmachata@redhat.com> - 2010i-1
changelog:
  - Upstream 2010i:
    - Morocco will have DST from 2010-05-02 to 2010-08-08
    - San Luis, Argentina will keep permanent DST after April 11, 2010
    - Updates of historical stamps for Taiwan
  - Resolves: #585134 (Morocco starts DST on May 2, 2010)


author: Andreas Schwab <schwab@redhat.com> - 2010k-1
changelog:
  - Upadate to 2010k (#618600)
    - No DST in Egypt during Ramadan in 2010
    - Bahía de Banderas moved to UTC-6 on April 4, 2010, new time zone
      America/Bahia_Banderas
    - Rename Pacific/Truk to Pacific/Chuuk and Pacific/Ponape to Pacific/Pohnpei
    - Update historical data of Europe/Helsinki
    - Update tz-links page


author: Petr Machata <pmachata@redhat.com> - 2010l-1
changelog:
  - Upstream 2010l:
    - Change Cairo's 2010 reversion to DST from the midnight between
      September 8 and 9 to the midnight between September 9 and 10.
    - Change Gaza's 2010 return to standard time to the midnight between
      August 10 and 11.
    - Bahia de Banderas (Mexican state of Nayarit) changed time zone
      UTC-7 to new time zone UTC-6 on April 4, 2010
  - Resolves: #628645


author: Petr Machata <pmachata@redhat.com> - 2010o-1
changelog:
  - Upstream 2010m:
    - Hong Kong didn't observe DST in 1977
    - In zone.tab, remove obsolete association of Vostok Station with
      South Magnetic Pole; add association with Lake Vostok
  - Upstream 2010n:
    - Change end of DST in Samoa in 2011 from 2011-04-03 0:00 to
      2011-04-03 1:00
  - Upstream 2010o:
    - Fiji will end DST on March 6, 2011, not March 27, 2011
  - Resolves: #662781


author: Petr Machata <pmachata@redhat.com> - 2011b-1
changelog:
  - Upstream 2011a:
    - Updates of historical stamps for Hawaii
  - Upstream 2011b:
    - America/North_Dakota/Beulah: Mercer County, North Dakota, changed
      from the mountain time zone to the central time zone
  - Kemerovo oblast should use OMST/OMSST abbreviation (tzdata-2011b-kemerovo.patch)
  - Resolves: #596800
  - tzdata-2011b-c.patch
    - Update of historical stamps for Juneau, Sitka, and histcurrent
      stamps for Metlakatla.  Sitka and Metlakatla are new zones.
    - Delay end of DST in Chile in 2011 until first Sunday in April.
  - Resolves: #681907


author: Petr Machata <pmachata@redhat.com> - 2011d-1
changelog:
  - Upstream 2011d:
    - Change end of DST in Samoa in 2011.
    - Change start of DST in Cuba in 2011.
    - Move start of DST in Turkey by one day in 2011.
  - Dropped tzdata-2011b-c.patch
  - Resolves: #684213


author: Petr Machata <pmachata@redhat.com> - 2011d-3
changelog:
  - Morocco introduced DST for 2011 from April 2 to July 31. (tzdata-2011d-morocco.patch)
  - Resolves: #692031


author: Petr Machata <pmachata@redhat.com> - 2011g-1
changelog:
  - Upstream 2011e:
    - Morocco introduced DST for 2011 from April 2 to July 31.
    - Delay end of DST in Chile in 2011 until May 7.
  - Resolves: #694521
  - Upstream 2011f:
    - The Falkland Islands will not turn back clocks this winter, but
      stay on daylight saving time.
  - Upstream 2011g:
    - Egypt abandons DST in 2011 (and forward)
  - Resolves: #698613
  - Dropped tzdata-2011d-chile.patch
  - Dropped tzdata-2011d-morocco.patch


author: Petr Machata <pmachata@redhat.com> - 2011h-2
changelog:
  - Upstream 2011h:
    - Russia abandons DST in 2011.
    - *.tab: change AN (Netherlands Antilles) to CW (Curacao)
  - Resolves: #716936


author: Petr Machata <pmachata@redhat.com> - 2011h-3
changelog:
  - Patch for upcoming change in Newfoundland.  The transition time
    changes from 12:01 AM to 2:00 AM.
  - Resolves: #729693


author: Petr Machata <pmachata@redhat.com> - 2011k-0.1.20110921
changelog:
  - Upstream 2011i:
    - Add Africa/Juba (South Sudan) zone
    - Samoa skips over the date line on 2011-12-30
    - Use KALT as abbreviation for Europe/Kalinigrad
    - Canonical version of the Newfoundland patch
    - Change America/Resolute use of EST to 2006-2007 only
    - Assume Metlakatla abandoned use of daylight saving in 1983
    - Sync iso3166.tab and zone.tab with above
  - Upstream 2011j:
    - Fix the Samoa date line skip
    - Changes in past timestamp typos several Africa zones
  - Proposed upstream 2011k:
    - Belarus and Ukraine adopt permanent DST in 2011
    - Palestine suspends DST during Ramadan in 2011
    - Gaza and West Bank split in 2011.  West Bank is tracked in the
      timezone Asia/Hebron.  zone.tab update accordingly.
  - Resolves: #740000


author: Petr Machata <pmachata@redhat.com> - 2011l-2
changelog:
  - Upstream 2011l:
    - Fix ancient stamps for America/Sitka
    - Asia/Hebron transitioned to standard time already on Sep 30, not Oct 3
    - Fiji will introduce DST on Oct 22
  - Resolves: #740000


author: Petr Machata <pmachata@redhat.com> - 2011l-3
changelog:
  - State of Bahia, Brazil, to resume Summer Time on Oct 16
  - The project moved, reflect this in URL
  - Resolves: #740000


author: Petr Machata <pmachata@redhat.com> - 2011n-1
changelog:
  - Rebase to 2011n
    - Cuba postponed DST by two weeks to Nov 13
    - Fiji will enter DST on Jan 21
  - Add a patch for the leap second that will occur this summer
  - Resolves: #773755


author: Petr Machata <pmachata@redhat.com> - 2011n-2
changelog:
  - The Chilean Government has decided to postpone the entrance into
    winter time (to leave DST) from March 11 2012 to April 28th 2012
  - Resolves: #796569


author: Petr Machata <pmachata@redhat.com> - 2012b-1
changelog:
  - Rebase to 2012b; changes vs. 2011n-2:
    - Changes to zones for Antarctica stations
    - Armenia abolished DST in 2012 and forward
    - Cuba enters DST on 31st March
    - Falkland Islands will stay on permanent Summer Time
    - New zone for Creston Valley, Canada, which differs from Dawson
      Creek in past stamps.  Changes to historical stamps in Canada.
    - Last year, Tokelau skipped over the date line together with Samoa
  - Resolves: #802460


author: Petr Machata <pmachata@redhat.com> - 2012b-2
changelog:
  - Morocco DST starts on the last Sunday of March (March 25, 2012) and
    ends on last Sunday of September, except the month of Ramadan.  It
    is currently unclear what that Ramadan bit means, so this is not
    covered by the patch as of now.
  - Resolves: #802460


author: Petr Machata <pmachata@redhat.com> - 2012c-1
changelog:
  - Upstream 2012c
    - Haiti observes DST from 2012 on
    - Gaza Strip and Hebron observe DST in 2012
    - Change start of DST in Syria to last Friday in March
  - Resolves: #820732


author: Petr Machata <pmachata@redhat.com> - 2012f-1
changelog:
  - Upstream 2012f
    - Fiji will start daylight savings at 2 am on Sunday 21st October 2012
      and end at 3 am on Sunday 20th January 2013.  Guess it will be like
      that in following years as well.
  - Upstream 2012e
    - Tokelau is in time zone UTC+13, not UTC+14 (and always was)
  - Upstream 2012d
    - Morocco will not observe DST during the month of Ramadan.
      DST cessation end date was corrected.
    - Drop tzdata-2012c-morocco.patch


author: Petr Machata <pmachata@redhat.com> - 2012g-1
changelog:
  - Upstream 2012g
    - Adjust the packaging for new Makefile
    - Palestine: Fall transition was Sep 21, not Sep 28
    - Samoa: Daylight Saving Time commences on Sunday 30th September
      2012 and ends on Sunday 7th of April 2013.
  - Resolves: #868173


author: Petr Machata <pmachata@redhat.com> - 2012h-1
changelog:
  - Upstream 2012h
    - Brazilian state Bahia no longer has DST.
    - Brazilian state Tocantins now has DST.
    - Israel has new DST rules next year.
    - Jordan stays on DST this winter.


author: Petr Machata <pmachata@redhat.com> - 2012h-2
changelog:
  - Switch back to using system zic, ignore upstream Makefile at all.
    We do so for java anyway.
  - Drop Factory from distribution


author: Petr Machata <pmachata@redhat.com> - 2013b-1
changelog:
  - Upstream 2013b
    - Paraguay will end DST on March 24 this year
    - Haiti uses US daylight-saving rules this year
    - Morocco does not observe DST during Ramadan
  - Upstream 2013a
    - Retire Chile patch, 2013a has the data
    - New Zones Asia/Khandyga, Asia/Ust-Nera, Europe/Busingen
    - Many changes in historical timestamps


author: Petr Machata <pmachata@redhat.com> - 2013c-1
changelog:
  - Upstream 2013c
    - Sync past stamps for Palestine and West Bank with timeanddate.com
    - Assume that the recent change to Paraguay's DST rules is permanent
    - Macquarie was uninhabited between 1919 and 1948.  It's also part
      of Australia (update in zone.tab).


author: Petr Machata <pmachata@redhat.com> - 2013c-2
changelog:
  - Update descriptions in iso3166.tab; make Jerusalem coordinates in
    zone.tab more precise
    (0001-Adjust-commentary-to-try-to-defuse-recent-issues-som.patch)
  - Update local mean time for Jerusalem to match more-precise longitude
    (0002-asia-Asia-Jerusalem-Fix-LMT-to-match-more-precise-lo.patch)
  - Move Morocco's midsummer 2013 transitions
    (0003-Move-Morocco-s-midsummer-2013-transitions.patch)
    Fixes 980805 980807 981019 981020
  - Israel now falls back on the last Sunday of October
    (0004-Israel-now-falls-back-on-the-last-Sunday-of-October.patch)


author: Patsy Franklin <pfrankli@redhat.com> 2013i-1
changelog:
  - Rebase with early release of 2013i from Paul Eggert github.
    - Jordan switches back to standard time at 00:00 on December 20,2013.
    - The 2006-2011 transition schedule is planned to resume in 2014.
    - The compile-time flag NOSOLAR has been removed.
    - The files solar87, solar88, and solar89 are no longer distributed.
    - tz-link.htm now mentions Noda Time.


author: Patsy Franklin <pfrankli@redhat.com> - 2014b-1
changelog:
  - Rebase to 2014b
    - Crimea switches to Moscow time on 2014-03-30 at 02:00 local time.
    - New entry for Troll station, Antarctica.


author: Patsy Franklin <pfrankli@redhat.com> - 2014c-1
changelog:
  - Rebase to 2014c
    - Egypt's government to re-apply daylight saving time.
    - zic now generates transitions for minimum time values
    - Port to Cygwin sans glibc.
    - Remove now-confusing comment about Jordan.


author: Patsy Franklin <pfrankli@redhat.com> - 2014d-1
changelog:
  - Rebase to 2014d
    - zic no longer generates files containing time stamps before
      the Big Bang.  This works around GNOME bug 730332


author: Patsy Franklin <pfrankli@redhat.com> - 2014e-1
changelog:
  - Rebase to 2014e
    - Morrocco suspends DTS for Ramadan 
         June 28 at 03:00 and August 2 at 02:00
    - Egypt suspends DTS for Ramadan
         June 26 and July 31 at 24:00


author: Patsy Franklin <pfrankli@redhat.com> - 2014f-1
changelog:
  - Rebase to 2014f
    - Several Russian time zone changes effective on 2014-10-26
      at 02:00 local time.  See NEWS file for additional details.


author: Patsy Franklin <pfrankli@redhat.com> - 2014g-1
changelog:
  - Rebase to 2014g
    - Turks & Caicos is switching from US eastern time to UTC-4
      year-round, modeled as a switch from EST/EDT to AST 
      on 2014-11-02 at 02:00.


author: Petr Machata <pmachata@redhat.com> - 2014h-1
changelog:
  - Rebase to 2014h
    - Changes to historical transitions in America/Jamaica and
      Asia/Novokuznetsk.
    - Africa/{Blantyre, Bujumbura, Gaborone, Harare, Kigali, Lubumbashi,
      Lusaka} now alias Africa/Maputo, because they don't differ in
      post-1970 stamps.
    - Africa/Maseru and Africa/Mbabane now alias Africa/Johannesburg for
      the same reason.


author: Patsy Franklin <pfrankli@redhat.com> - 2014i-1
changelog:
  - Rebase to 2014i
    - Pacific/Fiji will observe DST from 2014-11-02 02:00 to 2015-01-18 03:00.
    - A new Zone Pacific/Bougainville, for the part of Papua New Guinea
      that plans to switch from UTC+10 to UTC+11 on 2014-12-28 at 02:00.


author: Patsy Franklin <pfrankli@redhat.com> - 2014j-1
changelog:
  - Rebase to 2014j
    - Turks & Caicos' switch from US eastern time to UTC-4 year-round
      did not occur on 2014-11-02 at 02:00.  It's currently scheduled
      for 2015-11-01 at 02:00.


author: Patsy Franklin <pfrankli@redhat.com> - 2015a-1
changelog:
  - Rebase to 2015a
    - New leap second 2015-06-30 23:59:60 UTC as per IERS Bulletin C 49.
    - The Mexican state of Quintana Roo, represented by America/Cancun,
      will shift from Central Time with DST to Eastern Time without DST
      on 2015-02-01 at 02:00.
    - Chile will not change clocks in April or thereafter; its new
      standard time will be its old daylight saving time.  This affects
      America/Santiago, Pacific/Easter, and Antarctica/Palmer.


author: Patsy Franklin <pfrankli@redhat.com> - 2015b-1
changelog:
  - Rebase to 2015b
    - Mongolia will start observing DST again this year, from the last
      Saturday in March at 02:00 to the last Saturday in September at 00:00.
    - Palestine will start DST on March 28, not March 27.  Also,
      correct the fall 2014 transition from September 26 to October 24.
      Adjust future predictions accordingly.


author: Patsy Franklin <pfrankli@redhat.com> - 2015c-1
changelog:
  - Rebase to 2015c
    - Egypt's spring-forward transition is at 24:00 on April's last Thursday,
      not 00:00 on April's last Friday.  2015's transition will therefore be on
      Thursday, April 30 at 24:00, not Friday, April 24 at 00:00.  Similar fixes
      apply to 2026, 2037, 2043, etc.


author: Patsy Franklin <pfrankli@redhat.com> - 2015d-1
changelog:
  - Rebase to 2015d:
    - The Egyptian Cabinet announced that DST will be cancelled for 2015.
    - The abbreviations for Hawaii-Aleutian standard and daylight times
      have been changed from HAST/HADT to HST/HDT, as per US Government
      Printing Office style. This affects only America/Adak since 1983,
      as America/Honolulu was already using the new style.


author: Patsy Franklin <pfrankli@redhat.com> - 2015d-3
changelog:
  -  Morocco will suspend DST from 2015-06-14 03:00 through 2015-07-19 02:00,
     not 06-13 and 07-18 as we had guessed.


author: Patsy Franklin <pfrankli@redhat.com> - 2015e-1
changelog:
  - Rebase to 2015e:
    - Morocco will suspend DST from 2015-06-14 03:00 through 2015-07-19 02:00,
      not 06-13 and 07-18 as we had guessed.  (Thanks to Milamber.)
    - Assume Cayman Islands will observe DST starting next year, using US rules.
      Although it isn't guaranteed, it is the most likely.


author: Patsy Franklin <pfrankli@redhat.com> - 2015f-1
changelog:
  - Rebase to 2015f
    - North Korea switches to +0830 on 2015-08-15.
      The abbreviation remains "KST".
    - Uruguay no longer observes DST.


author: Patsy Franklin <pfrankli@redhat.com> - 2015g-1
changelog:
  - Rebase to 2015g
    - Turkey's 2015 fall-back transition is scheduled for Nov. 8, not Oct. 25.
    - Norfolk moves from +1130 to +1100 on 2015-10-04 at 02:00 local time.
    - Fiji's 2016 fall-back transition is scheduled for January 17, not 24.
    - Fort Nelson, British Columbia will not fall back on 2015-11-01.  It has
      effectively been on MST (-0700) since it advanced its clocks on 2015-03-08.
      New zone America/Fort_Nelson.


author: Patsy Franklin <pfrankli@redhat.com> - 2015g-3
changelog:
  - Synchronize javazic tool for OpenJDK 6 & 7 with upstream. (#1212549)
  - Fix Africa/Casablanca transitions from 2027 forward. (#1217109)


author: Patsy Franklin <pfrankli@redhat.com> - 2016a-1
changelog:
  - Rebase to 2016a
    - America/Cayman will not observe daylight saving this year after all.
      Revert our guess that it would.
    - Asia/Chita switches from +0800 to +0900 on 2016-03-27 at 02:00.
    - Asia/Tehran now has DST predictions for the year 2038 and later,
      to be March 21 00:00 to September 21 00:00.  This is likely better
      than predicting no DST, albeit off by a day every now and then.


author: Patsy Franklin <pfrankli@redhat.com> - 2016b-1
changelog:
  - Rebase to 2016b
    - New zones Europe/Astrakhan and Europe/Ulyanovsk for Astrakhan and
      Ulyanovsk Oblasts, Russia, both of which will switch from +03 to +04 on
      2016-03-27 at 02:00 local time.  They need distinct zones since their
      post-1970 histories disagree.  New zone Asia/Barnaul for Altai Krai and
      Altai Republic, Russia, which will switch from +06 to +07 on the same date
      and local time.  The Astrakhan change is already official; the others have
      passed the first reading in the State Duma and are extremely likely.
      Also, Asia/Sakhalin moves from +10 to +11 on 2016-03-27 at 02:00.
    - As a trial of a new system that needs less information to be made up,
      the new zones use numeric time zone abbreviations like "+04"
      instead of invented abbreviations like "ASTT".
    - Haiti will not observe DST in 2016.
    - Palestine's spring-forward transition on 2016-03-26 is at 01:00, not 00:00.
      Guess future transitions will be March's last
      Saturday at 01:00, not March's last Friday at 24:00.


author: Patsy Franklin <pfrankli@redhat.com> - 2016c-1
changelog:
  - Rebase to 2016c
    - Azerbaijan no longer observes DST.
    - Chile reverts from permanent to seasonal DST.


author: Daniel Berrange <berrange@redhat.com> - 0.2.0-1
changelog:
  - Added wizard for creating virtual machines
  - Added embedded serial console
  - Added ability to take screenshots


author: Daniel Berrange <berrange@redhat.com> - 0.2.1-1
changelog:
  - Updated to 0.2.1 tar.gz
  - Added rules to install/uninstall gconf schemas in preun,post,pre
    scriptlets
  - Updated URL for source to reflect new upstream download URL


author: Daniel Berrange <berrange@redhat.com> - 0.2.1-3.fc6
changelog:
  - Added requires on pygtk2-libglade & librsvg2 (bz 205941 & 205942)
  - Re-arrange to use console-helper to launch app
  - Added 'dist' component to release number


author: Daniel Berrange <berrange@redhat.com> - 0.2.2-1.fc6
changelog:
  - Fix event handling in create VM wizard (bz 206660 & 206186)
  - Fix close button in about dialog (bz 205943)
  - Refresh .pot files
  - Turn on VNC scrollbars fulltime to avoid GTK window sizing issue
    which consistently resize too small.


author: Daniel Berrange <berrange@redhat.com> - 0.2.3-1.fc6
changelog:
  - Require xeninst >= 0.93.0 to fix block backed devices
  - Skip para/fully-virt step when going back in wizard if not HVM host (bz 207409)
  - Fix handling of modifier keys in VNC console so Alt key doesn't get stuck (bz 207949)
  - Allow sticky modifier keys by pressing same key 3 times in row (enables Ctrl-Alt-F1
    by doing Ctrl Ctrl Ctrl  Alt-F1)
  - Improved error handling during guest creation
  - Log errors with python logging, instead of to stdout
  - Remove unused buttons from main domain list window
  - Switch out of full screen & release key grab when closing console
  - Trim sparkline CPU history graph to 40 samples max
  - Constraint VCPU adjuster to only allow upto guest's max VCPU count
  - Show guest's max & current VCPU count in details page
  - Fix rounding of disk sizes to avoid a 1.9 GB disk being rounded down to 1 GB
  - Use raw block device path to CDROM not mount point for HVM guest (bz 206965)
  - Fix visibility of file size spin box (bz 206186 part 2)
  - Check for GTK failing to open X11 display (bz 205938)


author: Daniel P. Berrange <berrange@redhat.com> 0.2.3-2.fc6
changelog:
  - Fix segv in sparkline code when no data points are defined (bz  208185)
  - Clamp CPU utilization between 0 & 100% just in case (bz 208185)


author: Daniel P. Berrange <berrange@redhat.com> - 0.2.5-1.fc7
changelog:
  - Switch to use python-virtinst instead of python-xeninst due to 
    renaming of original package
  - Disable keyboard accelerators when grabbing mouse to avoid things like
    Ctrl-W closing the local window, instead of remote window bz 210364
  - Fix host memory reporting bz 211281
  - Remove duplicate application menu entry bz 211230
  - Fix duplicated mnemonics (bz 208408)
  - Use blktap backed disks if available
  - Use a drop down list to remember past URLs (bz 209479)
  - Remove unused help button from preferences dialog (bz 209251)
  - Fix exception when no VNC graphics is defined
  - Force immediate refresh of VMs after creating a new one
  - Improve error reporting if run on a kernel without Xen (bz 209122)
  - More fixes to avoid stuck modifier keys on focus-out (bz 207949)


author: Daniel P. Berrange <berrange@redhat.com> - 0.2.6-1.fc7
changelog:
  - Imported translations from Fedora i18n repository
  - Make (most) scrollbar policies automatic
  - Set busy cursor while creating new VMs
  - Preference for controlling keygrab policy
  - Preference for when to automatically open console (bz 211385)
  - Re-try VNC connection attempt periodically in case VNC daemon
    hasn't finished starting up
  - Added activation of URLs for about dialog (bz 210782)
  - Improved error reporting when connecting to HV (bz 211229)
  - Add command line args to open specific windows
  - Don't skip para/full virt wizard step - instead gray out full
    virt option & tell user why
  - Change 'physical' to 'logical' when refering to host CPUs
  - Include hostname in titlebar
  - Disable wizard sensitivity while creating VM


author: Daniel P. Berrange <berrange@redhat.com> - 0.2.6-3.fc7
changelog:
  - Imported latest translations from Fedora i18n repository (bz 203783)
  - Use 127.0.0.1 address for connecting to VNC console instead of
    localhost to avoid some issue with messed up /etc/hosts.
  - Add selector for sparse or non-sparse file, defaulting to non-sparse.
    Add appropriate warnings and progress-bar text. (bz 218996)
  - Disable memory ballooning & CPU hotplug for HVM guests (bz 214432)
  - Updated memory-setting UI to include a hard upper limit for physical
    host RAM
  - Added documentation on the page warning that setting virtual host RAM
    too high can exhaust the memory of the machine
  - Handle errors when hostname resolution fails to avoid app exiting (bz 216975)


author: Daniel P. Berrange <berrange@redhat.com> - 0.3.0-1.fc7
changelog:
  - Added support for managing inactive domains
  - Require virt-inst >= 0.100.0 and libvirt >= 0.1.11 for ianctive
    domain management capabilities
  - Add progress bars during VM creation stage
  - Improved reliability of VNC console
  - Updated translations again
  - Added destroy option to menu bar to forceably kill a guest
  - Visually differentiate allocated memory, from actual used memory on host
  - Validate file magic when restoring a guest from a savd file
  - Performance work on domain listing
  - Allow creation of non-sparse files
  - Fix backspace key in serial console


author: Daniel P. Berrange <berrange@redhat.com> - 0.3.1-1.fc7
changelog:
  - Added support for managing QEMU domains
  - Automatically grab mouse pointer to workaround dual-cursor crazyness


author: Daniel P. Berrange <berrange@redhat.com> - 0.3.2-1.fc7
changelog:
  - Added online help to all windows
  - Bug fixes to virtual console popup, key grab & accelerator override


author: Daniel P. Berrange <berrange@redhat.com> - 0.4.0-1.fc7
changelog:
  - Support for managing virtual networks
  - Ability to attach guest to virtual networks
  - Automatically set VNC keymap based on local keymap
  - Support for disk & network device addition/removal


author: Daniel P. Berrange <berrange@redhat.com> - 0.4.0-2.fc7
changelog:
  - Refresh po file translations (bz 238369)
  - Fixed removal of disk/network devices
  - Fixed toolbar menu option state
  - Fixed file dialogs & default widget states


author: Daniel P. Berrange <berrange@redhat.com> - 0.5.0-1.fc8
changelog:
  - Updated to 0.5.0 release
  - Support for managing remote hosts
  - Switch to use GTK-VNC for the guest console


author: Daniel P. Berrange <berrange@redhat.com> - 0.5.1-1.fc8
changelog:
  - Updated to 0.5.1 release
  - Open connections in background
  - Make VNC connection retries more robust
  - Allow changing of CDROM media on the fly
  - Add PXE boot installation of HVM guests
  - Allow tunnelling VNC over SSH


author: Daniel P. Berrange <berrange@redhat.com> - 0.5.2-1.fc8
changelog:
  - Update to 0.5.2 release
  - No scrollbars for high res guest in low res host (rhbz 273181)
  - Unable to remove network device (rhbz 242900)
  - Fixed broken menu items (rhbz 307551)
  - Require libvirt 0.3.3 to get CDROM change capability for Xen


author: Cole Robinson <crobinso@redhat.com> - 0.6.0-1.fc10
changelog:
  - Update to 0.6.0 release
  - Add libvirt storage management support
  - Basic support for remote guest installation
  - Merge VM console and details windows
  - Poll avahi for libvirtd advertisement
  - Hypervisor autoconnect option
  - Add sound emulation when creating new guests


author: Cole Robinson <crobinso@redhat.com> - 0.6.0-2.fc10
changelog:
  - Add gnome-python2-gnome requirement.
  - Allow seeing connection details if disconnected.
  - Updated catalan translation.
  - Update dutch translation.
  - Update german translation. (bug 438136)
  - Fix showing domain console when connecting to hypervisor.
  - Update POTFILES to reflect reality (bug 466835)


author: Cole Robinson <crobinso@redhat.com> - 0.6.0-3.fc10
changelog:
  - Add dbus-x11 to Requires (bug 467886)
  - Fedora translation updates (bug 467808)
  - Don't add multiple sound devices if install fails
  - Only popup volume path copy option on right click
  - Fix a variable typo


author: Cole Robinson <crobinso@redhat.com> - 0.6.0-5.fc10
changelog:
  - Fix spec for building on F9
  - Update 'New VM' virt descriptions to be less black and white (bz 470563)


author: Cole Robinson <crobinso@redhat.com> - 0.6.1-1
changelog:
  - Update to 0.6.1 release
  - Disk and Network VM stats reporting
  - VM Migration support
  - Support adding sound devices to existing VMs
  - Allow specifying device model when adding a network device to an existing VM


author: Cole Robinson <crobinso@redhat.com> - 0.6.1-4.fc11
changelog:
  - Update polish translation (bz 263301)
  - Fix sending ctrl-alt-del to guest
  - Fix cpu + mem stats options to remember preference.


author: Cole Robinson <crobinso@redhat.com> - 0.7.0-1.fc11
changelog:
  - Update to release 0.7.0
  - Redesigned 'New Virtual Machine' wizard
  - Option to remove storage when deleting a virtual machine.
  - File browser for libvirt storage pools and volumes
  - Physical device assignment (PCI, USB) for existing virtual machines.


author: Cole Robinson <crobinso@redhat.com> - 0.7.0-2.fc11
changelog:
  - Back compat fixes for connecting to older xen installations (bz 489885)
  - Don't show harmless NoneType error when launching new VM details window


author: Cole Robinson <crobinso@redhat.com> - 0.7.0-3.fc11
changelog:
  - Fix incorrect max vcpu setting in New VM wizard (bz 490466)
  - Fix some OK/Cancel button ordering issues (bz 490207)
  - Use openAuth when duplicating a connection when deleting a VM
  - Updated translations (bz 493795)


author: Mark McLoughlin <markmc@redhat.com> - 0.7.0-5.fc12
changelog:
  - Fix 'opertaing' typo in 'New VM' dialog (#495128)
  - Allow details window to resize again (#491683)
  - Handle collecting username for vnc authentication (#499589)
  - Actually handle arch config when creating a VM (#499145)
  - Log libvirt capabilities at startup to aid debugging (#500337)


author: Cole Robinson <crobinso@redhat.com> - 0.8.0-1.fc12
changelog:
  - Update to release 0.8.0
  - New 'Clone VM' Wizard
  - Improved UI, including an overhaul of the main 'manager' view
  - System tray icon for easy VM access (start, stop, view console/details)
  - Wizard for adding serial, parallel, and video devices to existing VMs.


author: Cole Robinson <crobinso@redhat.com> - 0.8.0-3.fc12
changelog:
  - Fix disk XML mangling via connect/eject cdrom (bz 516116)
  - Fix delete button sensitivity (bz 518536)
  - Fix populating text box from storage browser in 'New VM' (bz 517263)
  - Fix a traceback in an 'Add Hardware' error path (bz 517286)


author: Cole Robinson <crobinso@redhat.com> - 0.8.0-4.fc12
changelog:
  - Don't close libvirt connection for non-fatal errors (bz 522168)
  - Manager UI tweaks
  - Generate better errors if disk/net stats polling fails


author: Cole Robinson <crobinso@redhat.com> - 0.8.0-5.fc12
changelog:
  - Refresh host disk space in create wizard (bz 502777)
  - Offer to fix disk permission issues (bz 517379)


author: Cole Robinson <crobinso@redhat.com> - 0.8.0-6.fc12
changelog:
  - Fix VCPU hotplug
  - Remove access to outdated docs (bz 522823, bz 524805)
  - Update VM state text in manager view (bz 526182)
  - Update translations (bz 493795)


author: Cole Robinson <crobinso@redhat.com> - 0.8.0-7.fc12
changelog:
  - More translations (bz 493795)
  - Don't allow creating a volume without a name (bz 526111)
  - Don't allow volume allocation > capacity (bz 526077)
  - Add tooltips for toolbar buttons (bz 524083)


author: Cole Robinson <crobinso@redhat.com> - 0.8.1-1.fc12
changelog:
  - Update to release 0.8.1
  - VM Migration wizard, exposing various migration options
  - Enumerate CDROM and bridge devices on remote connections
  - Support storage pool source enumeration for LVM, NFS, and SCSI


author: Cole Robinson <crobinso@redhat.com> - 0.8.2-1.fc12
changelog:
  - Update to 0.8.2 release
  - Fix first virt-manager run on a new install
  - Enable floppy media eject/connect


author: Cole Robinson <crobinso@redhat.com> - 0.8.4-1
changelog:
  - Rebase to 0.8.4
  - 'Import' install option, to create a VM around an existing OS image
  - Support multiple boot devices and boot order
  - Watchdog device support
  - Enable setting a human readable VM description.
  - Option to manually specifying a bridge name, if bridge isn't detected


author: Cole Robinson <crobinso@redhat.com> - 0.8.4-2.el6
changelog:
  - Fix broken icon in UI (bz 577249)
  - Only close connection on 'remote' error (bz 580613)
  - Add pool refresh button (bz 580567)
  - Managed save/restore support (bz 591625)
  - Fix first run hypervisor detection (bz 591584)
  - Don't allow shutdown or unpause while cloning (bz 577252)
  - Offer to start default storage pool (bz 584672)
  - Skip post-install restart if user destroys VM (bz 587703)
  - Don't install outdated help docs (bz 588577)
  - Warn about unsupported VCPU overcommit (bz 588655)
  - Hide unsupported sound models (bz 588695)


author: Cole Robinson <crobinso@redhat.com> - 0.8.4-3.el6
changelog:
  - Fix VNC reconnect error (bz 593326)
  - Fix remote VNC connection with zsh (bz 593328)
  - Fix VNC auto keymap detection (bz 593333)
  - Fix New VM customize option with no storage (bz 593336)


author: Cole Robinson <crobinso@redhat.com> - 0.8.4-5.el6
changelog:
  - Allow setting cpuset automatically from NUMA config (bz 604205)
  - Update translations (bz 575681)
  - Fix pool building for LVM/disk pools (bz 597519)


author: Cole Robinson <crobinso@redhat.com> - 0.8.6-1.el6
changelog:
  - Rebase to 0.8.6 (bz 658959)
  - SPICE support (requires spice-gtk) (Marc-André Lureau)
  - Option to configure CPU model
  - Option to configure CPU topology
  - Save and migration cancellation (Wen Congyang)
  - Save and migration progress reporting
  - Option to enable bios boot menu
  - Option to configure direct kernel/initrd boot


author: Cole Robinson <crobinso@redhat.com> - 0.8.6-2
changelog:
  - Don't launch consoles on app startup (bz 670735)
  - Fix connecting to VNC over unix socket (bz 651606)
  - Fix changing 'Overview' settings (bz 673463)


author: Cole Robinson <crobinso@redhat.com> - 0.8.6-3.el6
changelog:
  - Add ICH6 sound model (bz 680827)
  - Don't error if shutting down a transient domain (bz 681113)
  - Don't offer to create readonly file formats (673028)
  - Improve wording if offering to reuse existing storage (bz 669741)
  - Disallow changing format in 'customize' screen for new storage (bz 677255)


author: Cole Robinson <crobinso@redhat.com> - 0.9.0-1.el6
changelog:
  - Rebased to version 0.9.0
  - Use a hiding toolbar for fullscreen mode
  - Use libguestfs to show guest packagelist and more (Richard W.M. Jones)
  - Basic 'New VM' wizard support for LXC guests
  - Remote serial console access (with latest libvirt)
  - Remote URL guest installs (with latest libvirt)
  - Add Hardware: Support <filesystem> devices
  - Add Hardware: Support <smartcard> devices (Marc-André Lureau)
  - Enable direct interface selection for qemu/kvm (Gerhard Stenzel)
  - Allow viewing and changing disk serial number


author: Cole Robinson <crobinso@redhat.com> - 0.9.0-3
changelog:
  - Fix typo that broke net stats reporting (bz 726447)
  - Add BuildRequires: GConf2 to fix package install (bz 726325)


author: Cole Robinson <crobinso@redhat.com> - 0.9.0-5
changelog:
  - Fix autodrawer on RHEL6, unbreaks opening console window (bz 727414)
  - Update icon cache after RPM install


author: Cole Robinson <crobinso@redhat.com> - 0.9.0-6
changelog:
  - Fix 'Resize to VM' graphical option (bz 728541)
  - More explicit python binary references (bz 708181)
  - Fix launching 'create pool' dialog (bz 729226)
  - More SCSI option hiding (bz 727766)
  - Fix showing XML chars in VM name (bz 732371)
  - Fix confusion when removing device with unapplied changes (bz 728845)
  - Fix deleting guest with managed save data (bz 728155)
  - Fix error when adding default storage (bz 728497)
  - Disable unsupported RHEL6 options (bz 727766, bz 710337, bz 729590, bz
    717373)


author: Cole Robinson <crobinso@redhat.com> - 0.9.0-7
changelog:
  - Detect that RHEL6 qemu supports spice (bz 734693)
  - Properly fix crash when deleting a vm device (bz 728845)
  - Try harder to generate remote URI for localhost for p2p migration (bz
    699953)
  - Fix vm lookup race after vm creation (bz 731771)


author: Cole Robinson <crobinso@redhat.com> - 0.9.0-8
changelog:
  - Fix changing disk bus from virtio->ide (bz 769192, bz 741937)
  - Fix serial console stalls when showing lots of text (bz 747490)
  - Fix connection drop if VM gets an error while shutting down (bz
    742055)
  - Make 'browse local' chooser allow entering a new path (bz 734529)
  - Escape XML chars in vm description tooltip (bz 741158)
  - Fix keyboard shortcuts when spice isn't focused (bz 733210)
  - Hide unsupported serial types (bz 740775)
  - Warn about unapplied changes in customize dialog (bz 736270)
  - Hide unsupported storage formats (bz 735766)


author: Cole Robinson <crobinso@redhat.com> - 0.9.0-9
changelog:
  - Fix scaling for spice (bz 750225)
  - Don't allow a busted iface to break other iface details page (bz
    786694)


author: Cole Robinson <crobinso@redhat.com> - 0.9.0-11
changelog:
  - Don't switch page every time lxc guest is updated (bz 796570)
  - Don't blacklist disk device if we grab stats for shutdown guest (bz
    796092)
  - Add QED to disk format list (bz 795323)


author: Cole Robinson <crobinso@redhat.com> - 0.9.0-12
changelog:
  - Fix reopening a remote graphical console (bz 811316)
  - Fix app crash when deleting multiple storage volumes (bz 803600)


author: Jiri Denemark <jdenemar@redhat.com> - 0.9.0-15
changelog:
  - Only reboot VM if it had an install phase (rhbz#824275)
  - Match usb device with vendorID, productID, bus, device (rhbz#820303)
  - Change Mbps to MB/s in migration dialog (rhbz#802639)


author: Martin Kletzander <mkletzan@redhat.com> - 0.9.0-19
changelog:
  - Fix changing cirrus->QXL for active VM (rhbz#985184)
  - Top level windows shouldn't be visible by default (rhbz#990507)
  - The bus, device values of USB device is decimal rather than hex (rhbz#820303)
  - Don't fail on selecting network without IP (rhbz#869474)
  - Differentiate duplicate usb devices by bus/addr (rhbz#820303)
  - Remove address when changing watchdog models (rhbz#869206)
  - Add 'pre-startup' signal and do nodedevs checking (rhbz#820303)
  - Create: s/Gb/GB/ for storage units (rhbz#873142)
  - Add support for security relabeling (rhbz#907399)
  - Always show toolbar in customize dialog (rhbz#981628)


author: Giuseppe Scrivano <gscrivan@redhat.com> - 0.9.0-20
changelog:
  - virt-manager shows the right guest status when guest is pmsuspended (rhbz#1091292)
  - Make consistent virt-manager's option "--profile=File" between manual page and help page. (rhbz#1069090)
  - Virt-manager: Add Virtio SCSI disk option. (rhbz#1049781)
  - Allow changing the default new VM CPU model. (rhbz#1046583)
  - virt-manager supports native gluster fs (rhbz#1040172)
  - virt-manager doesn't cause a python trace-back when it cannot open display (rhbz#1025706)
  - AttributeError: 'NoneType' object has no attribute 'storagePoolLookupByName' (rhbz#927257)
  - virt-manager doesn't set up TCP net console mode properly (rhbz#918451)
  - virt-manager cannot open console through IPV6. (rhbz#870383)
  - Support SPICE auto-redir in virt-manager (rhbz#807277)


author: Giuseppe Scrivano <gscrivan@redhat.com> - 0.9.0-21
changelog:
  - Fix error reporting (rhbz#1093980)
  - Fix parser error when install virt-manager (rhbz#1093979)
  - Fix Preferences/Feedback UI alignment (rhbz#1094083)


author: Giuseppe Scrivano <gscrivan@redhat.com> - 0.9.0-22
changelog:
  - Fix alignment of Preferences/VM Details (rhbz#1094083)
  - Fix description of "Source Name" in create-pool (rhbz#1094005)
  - Handle ipv6 addresses (rhbz#870383)
  - virt-manager: escape host string (rhbz#1094600)


author: Giuseppe Scrivano <gscrivan@redhat.com> - 0.9.0-29
changelog:
  - Use correct signal and callback names to catch cpu-threads property changes (rhbz#1190641)
  - Fix crash caused by closing an unowned fd (rhbz#1174464)


author: Seth Vidal <skvidal@phy.duke.edu>
changelog:
  - First RPM packaging
  - Stolen items from wu-ftpd's pam setup
  - Separated rh 7 and rh 6.X's packages
  - Built for Rh6


author: Seth Vidal <skvidal@phy.duke.edu>
changelog:
  - updated to 0.0.15
  - added entry for vsftpd.8 man page
  - added entry for vsftpd.log logrotate file
  - added TUNING file to docs list


author: Trond Eivind Glomsrød <teg@redhat.com> 1.0.1-4
changelog:
  - s/Copyright/License/
  - add "missingok" to the logrotate script, so we don't get errors
    when nothing has happened


author: Bill Nottingham <notting@redhat.com> 1.0.1-5
changelog:
  - don't spit out ugly errors if anonftp isn't installed (#62987)
  - fix horribly broken userlist setup (#62321)


author: Elliot Lee <sopwith@redhat.com> 1.0.1-8
changelog:
  - -D_FILE_OFFSET_BITS=64
  - smp make
  - remove forced optflags=-g for lack of supporting documentation


author: Nalin Dahyabhai <nalin@redhat.com> 1.0.1-9
changelog:
  - remove absolute paths from PAM configuration so that the right modules get
    used for whichever arch we're built for on multilib systems


author: Bill Nottingham <notting@redhat.com> 1.2.0-3
changelog:
  - tweak man page (#84584, #72798)
  - buildprereqs for pie (#99336)
  - free ride through the build system to fix (#101582)


author: Karsten Hopp <karsten@redhat.de> 1.2.1-1
changelog:
  - update to 1.2.1, which fixes #89765 and lot of other issues
  - remove manpage patch, it isn't required anymore
  - clean up init script
  - don't use script to find libs to link with (lib64 issues)


author: Bill Nottingham <notting@redhat.com> 1.2.1-5
changelog:
  - fix all references to vsftpd.conf to be /etc/vsftpd/vsftpd.conf,
    including in the binary (#121199, #104075)


author: Radek Vokal <rvokal@redhat.com> 2.0.1-1
changelog:
  - tcp_wrapper patch updated, signal patch updated
  - upgrade to 2.0.1, fixes several bugs, RHEL and FC builds


author: Radek Vokal <rvokal@redhat.com> 2.0.3-10
changelog:
  - vsfptd.log as a default log file has to be rotated (#167359)
  - vsftpd does dns reverse before passing hosts to pam_access.so (#159745)


author: Maros Barabas <mbarabas@redhat.com> - 2.0.5-14
changelog:
  - remove file upload permission problem 
  - change name of patch vsfptd-2.0.3-user_config
  - Resolves #190193


author: Maros Barabas <mbarabas@redhat.com> - 2.0.5-16
changelog:
  - Merge review: - fix using %{_var}, %{_sbindir} and 
                    %{_sysconfigdir} macros for files and install
                  - fix BuildRoot
                  - dropped usermod, openssl & pam requirement


author: Martin Nagy <mnagy@redhat.com> - 2.0.5-21
changelog:
  - Remove uniq_rename patch.
  - Correct create/lock race condition, original patch by <mpoole@redhat.com>
    (#240550).
  - Fix bad handling of unique files (#392231).
  - Added userlist_log option.
  - Allow usernames to begin with underscore or dot (#339911).
  - Removed user_config patch.
  - Fix nonrootconf patch (#400921).
  - Increase maximum length of allowed username (#236326).
  - Fix file listing issue with wildcard (#392181).
  - Removed use_localtime patch (#243087).


author: Martin Nagy <mnagy@redhat.com> - 2.0.6-1
changelog:
  - rebase for new upstream version
  - remove patches that were fixed in upstream: kickline, confspell, anon_umask


author: Martin Nagy <mnagy@redhat.com> - 2.1.0-0.1.pre3
changelog:
  - update to latest upstream release
  - cleanup the spec file
  - drop patches fixed upstream:
      vsftpd-1.0.1-missingok.patch
      vsftpd-1.2.1-nonrootconf.patch
      vsftpd-2.0.1-tcp_wrappers.patch
      vsftpd-2.0.2-signal.patch
      vsftpd-2.0.3-daemonize_fds.patch
      vsftpd-2.0.5-correct_comments.patch
      vsftpd-2.0.5-pasv_dot.patch
      vsftpd-2.0.5-write_race.patch
      vsftpd-2.0.5-fix_unique.patch
      vsftpd-2.0.5-uname_size.patch
      vsftpd-2.0.5-bind_denied.patch
      vsftpd-2.0.5-pam_end.patch
      vsftpd-2.0.5-underscore_uname.patch
      vsftpd-2.0.6-listen.patch
  - join all configuration patches into one:
      vsftpd-1.1.3-rh.patch
      vsftpd-1.2.1-conffile.patch
      vsftpd-2.0.1-dir.patch
      vsftpd-2.0.1-server_args.patch
      vsftpd-2.0.3-background.patch
      vsftpd-2.0.5-default_ipv6.patch
      vsftpd-2.0.5-add_ipv6_option.patch
      vsftpd-2.0.5-man.patch


author: Martin Nagy <mnagy@redhat.com> - 2.1.0-0.3.pre4
changelog:
  - update to latest upstream release
  - enable ptrace sandbox again
  - don't mark vsftpd_conf_migrate.sh as a config file


author: Jiri Skala <jskala@redhat.com> - 2.1.0-3
changelog:
  - updated to latest upstream version
  - improved daemonizing - init script gets correct return code if binding fails
  - trim white spaces from option values
  - fixed #483604 - vsftpd not honouring delay_failed_login when userlist active


author: Jiri Skala <jskala@rehat.com> - 2.2.2-1
changelog:
  - Resolves: #555321 - vsftpd segfaults with passive mode and SSL
  - updated to latest upstream version - fixes the bug #555321


author: Jiri Skala <jskala@rehat.com> - 2.2.2-3
changelog:
  - Resolves: #540818 - Local user access denied by default vsftpd.conf
  - Resolves: #580521 - vsftpd issues in RHEL5.4 (cloned)


author: Jiri Skala <jskala@rehat.com> - 2.2.2-9
changelog:
  - Resolves: #785084 - vsftpd can not handle square brackets in ls
  - Resolves: #785061 - vsftpd child terminates when listing files with UID/GID larger than signed in
  - Resolves: #717411 - Connection failures during upload using PORT not handled cleanly
  - Resolves: #752954 - Disabling Reverse DNS lookups in VSFTPd
  - Resolves: #745133 - vsftpd: documentation for 'max_per_ip' default setting is wrong
  - Resolves: #765757 - SITE HELP offers CHMOD even when it is disabled/unavailable
  - Resolves: #701300 - vsftpd.conf lists incorrect default value for xferlog_file
  - Resolvse: #785642 - Invalid error recovery in vsf_privop_pasv_listen()


author: Martin Osvald <mosvald@rehat.com> - 2.2.2-14
changelog:
  - Resolves: #1092877 - The vsftpd hangs in a SIGCHLD handler when the pam_exec.so is used in pam.d configuration


author: Lon Hohberger <lhh@redhat.com> 2.3-24
changelog:
  - Extend max file/archive size to 2^32-8193 (4294959103) bytes
  - Include better debugging output for configure script


author: Ivana Varekova <varekova@redhat.com> - 2.31-4
changelog:
  - fix "zip does not honor umask setting when creating archives"
  - fix "zip segfaults by attempt to archive big file"
  - spec file cleanup


author: Karel Klic <kklic@redhat.com> - 3.0-1
changelog:
  - New upstream version
  - Removed zip23.patch, because ZMEM is not used anyway
  - Removed zip-2.31-install.patch, problem solved in upstream
  - Removed zip23-umask.patch, upstream uses mkstemp which solves the problem
  - Removed zip-2.31-near-4GB.patch, because upstream version 
    handles large files well
  - Removed zip-2.31-configure.patch, configure is better in the current version
  - Removed zip-2.3-sf.patch, the error message doesn't exist in upstream anymore
  - Removed zip-2.31-umask_mode.patch, which fixes also removed near-4GB patch
  - Updated zip-2.31-time.patch for zip 3.0
  - Updated exec-shield.patch for zip 3.0
  - Updated zip-2.3-currdir.patch for zip 3.0


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - auto rebuild in the new build environment (release 10)
  - fix the texi source
  - patch to detect & link against nsl


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - fix postun script so that we don't remove ourselves on every update
    doh...
  - add a trigger to fix old versions of the package


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - 3.0.8
  - use %configure and %makeinstall
  - updated URL
  - disable old patches
  - add better patch for texi source
  - use %{_mandir} and %{_infodir}
  - use %{_tmppath}


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - fix the post script, so we only have only line for zsh
    and can remove the trigger
  - get rid of some instances of "/usr/local/bin/zsh"


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Remove contents from /etc/zshenv file - no reason to duplicate things
    from /etc/profile, which is sourced from /etc/zprofile (#32478)


author: Trond Eivind Glomsrød <teg@redhat.com> 4.0.4-5
changelog:
  - Source /etc/profile from /etc/zshenv instead of /etc/zprofile, 
    to run things the same way bash do (#62788)


author: Jens Petersen <petersen@redhat.com>
changelog:
  - 4.0.6
  - add url
  - add --without check build option
  - don't autoconf
  - make "make test" failure not go ignored
  - move sourcing of profile from zshenv to new .zshrc file for now (#65509)
  - preserve dates when installing rc files


author: Florian La Roche <Florian.LaRoche@redhat.de> 4.0.6-2
changelog:
  - make sure /bin/zsh is owned by root and not bhcompile
  - do not package zsh-%{version} into binary rpm


author: Jens Petersen <petersen@redhat.com> - 4.0.6-7
changelog:
  - don't set stty erase in a dumb terminal with tput kbs in /etc/zshrc (#89856)
    [reported by Ben Liblit]
  - make default prompt more informative, like bash


author: Jens Petersen <petersen@redhat.com> - 4.0.7-2
changelog:
  - quote % in file glob'ing completion code (#110852)
    [reported with patch by Keith T. Garner]
  - add zsh-4.0.7-bckgrnd-bld-102042.patch from Philippe Troin to allow
    configure to run in the background (#102042) [reported by Michael Redinger]
  - above patch requires autoconf to be run
  - include html manual in separate -html subpackage
  - changed url to master site
  - skip completion tests on ppc and ppc64 for now, since they hang


author: Jens Petersen <petersen@redhat.com> - 4.0.9-1
changelog:
  - update to 4.0.9 release
  - zsh-4.0.7-completion-_files-110852.patch no longer needed
  - update zsh-4.0.7-bckgrnd-bld-102042.patch to better one with --with-tcsetpgrp
    configure option by Philippe Troin
  - configure --with-tcsetpgrp
  - buildrequire texinfo for makeinfo
  - fix ownership of html manual (Florian La Roche, #112749)


author: Jens Petersen <petersen@redhat.com> - 4.2.0-1
changelog:
  - update to 4.2.0 stable release
  - zsh-4.0.7-bckgrnd-bld-102042.patch no longer needed
  - add compinit and various commented config improvements to .zshrc
    (Eric Hattemer,#114887)
  - include zshprompt.pl in doc dir (Eric Hattemer)
  - drop setenv function from zshrc


author: Jens Petersen <petersen@redhat.com> - 4.2.0-3
changelog:
  - source profile in zprofile rather than .zshrc (Péter Kelemen,
    Magnus Gustavsson, 102187,126539)
  - add zsh-4.2.0-jobtable-125452.patch to fix job table bug
    (Henrique Martins, 125452)
  - buildrequire tetex for texi2html (Maxim Dzumanenko, 124182)


author: Colin Walters <walters@redhat.com> - 4.2.1-1
changelog:
  - New upstream version 4.2.1
  - FEATURES, MACHINES, and NEWS moved to toplevel dir
  - Update zsh-4.0.6-make-test-fail.patch, but do not apply it for now
  - Remove upstreamed zsh-4.2.0-jobtable-125452.patch


author: James Antill <james@and.org> - 4.2.6-4
changelog:
  - Fix buildroot to new Fedora default.
  - Remove /etc/skel from ownership.
  - Remove explicit libcap dep.
  - Tweak postun script.
  - Move checking to generic rpm infrastructure.
  Resolves: rhbz#226813


author: James Antill <james@and.org> - 4.2.6-5
changelog:
  - Fix sed typo.
  - Fix skel expansion problem.
  - Add Requires for mktemp/info/etc.
  - Use cp again due to SELinux context
  Resolves: rhbz#226813


author: James Antill <james@and.org> - 4.2.6-6
changelog:
  - Move requires to be scriptlet specific
  - chmod functions, to shut rpmlint up (false positive warning)
  - sed only the requied functions (again, shuts rpmlint up)
  - Remove zsh-4.0.6-make-test-fail.patch
  - Remove RPM_SOURCE_DIR var, using %{SOURCEx} and basename
  Resolves: rhbz#226813


author: James Antill <james@fedoraproject.org> - 4.3.4-7
changelog:
  - Tweak /etc/zshrc to source /etc/profile.d/*.sh in ksh compat. mode
  - Tweak /etc/zprofile to source /etc/profile in ksh compat. mode
  - Resolves: rhbz#430665


author: James Antill <james@fedoraproject.org> - 4.3.6-5
changelog:
  - Import new upstream 4.3.6
  - Rebase 8bit prompt patch
  - Add patch fuzz=2
  - Add BuildReq on /bin/hostname directly
  - FIXME: These should all be unpatched, at some point.
  - Don't test /dev/fd as mock doesn't like it
  - Don't test the modload module, as mock doesn't like loading them all
  - Don't test the select test in A01grammar, stdin/stderr racy?


author: James Antill <james.antill@redhat.com> - 4.3.10-5
changelog:
  - Change invocation as "zsh foo" to search the path by default.
  - Add new option PATH_SCRIPT for old behaviour.
  - Resolves: rhbz#612685
  - Solve defect in emulation of ksh with math substituion.
  - Resolves: rhbz#657300


author: James Antill <james.antill@redhat.com> - 4.3.10-7
changelog:
  - Change {NAME:OFFSET:LENGTH} substitution feature to ignore KSH_ARRAYS option.
  - Fixup tests.
  - Resolves: rhbz#820530


author: Kamil Dudka <kdudka@redhat.com> - 4.3.10-12
changelog:
  - avoid using uninitialised memory after lexer realloc (#1146119)
  - replace an incorrect comment in /etc/zshenv (#1103697)
  - optimize matching of multiple * in wildcards (#1131172)
  - use heap rather than stack allocation for variable length arrays (#567215)
  - prevent jobs -Z from destroying environment variables (#878324)
  - shell emulation doc addition (#1104021)


